Range of ports to specify in an extended accees-list

[rlvovskiy]

Is there a way to specify a range of ports at the the end of an extended access-list on a router. I mean something like 'accees-list 101 permit tcp 10.10.10.0 0.0.0.255 20.0.0.0 0.0.0.255 eq 6000-6016'.

thank you

[osam · Accepted solution]

You can do something like..

ip access-list extended myACL

permit tcp 10.10.10.0 0.0.0.255 20.0.0.0 0.0.0.255 gt 5999

permit tcp 10.10.10.0 0.0.0.255 20.0.0.0 0.0.0.255 lt 6017

deny tcp 10.10.10.0 0.0.0.255 20.0.0.0 0.0.0.255

Just play with the "lt" and "gt" parameters.

[rlvovskiy]

Thank you very much - that works.

[osam]

Any time.. :)

[pleitnes]

Why not just use the range command?

ip access-list extended myACL

permit tcp 10.10.10.0 0.0.0.255 20.0.0.0 0.0.0.255 range 6000 6016

s.