Wildcard mask for PIX

[clifton-gibson]

Will the wildcard mask in the PIX work to grant access to addresses .82 -.83 and .103-.104?

aaa authentication except outbound 10.153.158.49 255.255.255.255 170.206.225.82 255.255.255.252 TACACS+

aaa authentication except outbound 10.153.158.49 255.255.255.255 170.206.225.103 255.255.255.252 TACACS+

[gfullage]

Wildcard masks in the PIX work just the same as anywhere else, and just like anywhere else, they're dependent on the IP addresses you're trying to group together.

To get the 82 and the 83 addresses in one go, use:

170.206.225.82 255.255.255.254

You can't get the 103 and 104 addresses in one line though, unless you also include a bunch of other addresses on either side of that. You'll have to just do the following for those two:

170.206.225.103 255.255.255.255

170.206.225.104 255.255.255.255