cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
385
Views
0
Helpful
2
Replies

VPN interesting traffic

Michal Valach
Level 1
Level 1

Hello all,

can anybody explain me one thing please? I have VPN on cisco router and I want 7 hosts IPs to be able communiate thru VPN. I have this ACL:

 

10 permit ip 10.1.1.0  0.0.0.7 host 192.168.1.57

What I am wondering if broadcas IP 10.1.1.7 can be represented by host IP?

1 Accepted Solution

Accepted Solutions

ghostinthenet
Level 7
Level 7

It can.

Address sets in ACLs have similarities in notation to subnets and subnet masks, but they really aren't the same.

If we were talking about a subnet of 10.1.1.0/29 (255.255.255.248) then you would only have six hosts available on the network: 10.1.1.1-6.

Because we're talking about an ACL, it doesn't really care about subnetting rules. It's just defining anything in the range of 10.1.1.0-7.

So, if your network is 10.1.1.0/24 (255.255.255.0) but you only want the first seven hosts on that network to be able to cross your VPN, that ACL will do the job perfectly because the ACL doesn't consider the 10.1.1.7 address (or any other, for that matter) to be anything special.

View solution in original post

2 Replies 2

ghostinthenet
Level 7
Level 7

It can.

Address sets in ACLs have similarities in notation to subnets and subnet masks, but they really aren't the same.

If we were talking about a subnet of 10.1.1.0/29 (255.255.255.248) then you would only have six hosts available on the network: 10.1.1.1-6.

Because we're talking about an ACL, it doesn't really care about subnetting rules. It's just defining anything in the range of 10.1.1.0-7.

So, if your network is 10.1.1.0/24 (255.255.255.0) but you only want the first seven hosts on that network to be able to cross your VPN, that ACL will do the job perfectly because the ACL doesn't consider the 10.1.1.7 address (or any other, for that matter) to be anything special.

Great, thank you Jody, I thought the same, but needed to confirm :)

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: