Query with conduit statement

[pteal]

Hi

Please can some one help. I am trying to setup a conduit statement that will allow a number of devices to talk to a single address in a DMZ. The addresses start at 192.168.1.21 and go upto 192.168.1.40.

How do I summarise these addresses into a single conduit. The address they need to talk to is 192.168.1.9

conduit permit ????? tcp 1494 host 192.168.1.9

Can some one help me fill in the ????? section

Thanks for your help

[pgolding]

this address range cant be completely summarised with one entry, so what you can do is -

conduit permit tcp host 192.168.1.9 eq 1494 192.168.1.16 255.255.255.240

which will cover the range 192.168.1.16 through 192.168.1.31, then add smaller subnet permit statements for the other addresses. alternatively use one conduit statement for each address in the range.

we recommend using access lists over conduits.