Thanks, my interface vlan belongs to 172.17.0.0/19(my actual IP Block)with interface ip add of 172.17.0.1/19 and as a gateway for hosts that belong to that vlan.i want that all hosts on that VLAN can "only connect" if using /19.But host can still use the network even if i change the host subnet mask to /16.If i will disable the proxy ARP how does it affect the scenario?
If you disable proxy-arp, all that will prevent is the ability of the hosts using the /16 mask to communicate with other addresses within the 172.17.0.0/16 (i.e IP addresses outside the first /19)
However, if you want to stop hosts that are using a /16 mask from communicating with any remote addresses at all, you simply cannot do it this way. No matter what the subnet mask on a host is, when it sends an IP packet it will use its IP address as the source address in the IP packet. There is absolutely no indication of subnet mask at all so you simply cannot filter on the basis of that.
May I ask what your reasoning for doing this is ? Maybe there is another solution to achieving what you want.
We are pleased to announce availability of Beta software for 16.6.3.
16.6.3 will be the second rebuild on the 16.6 release train targeted
towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are
looking for early feedback from customers befor...
Introduction Featured Speakers Luis Espejel is the Telecommunications
Manager of IENova, an Oil & Gas company. Currently he works with Cisco
IOS® and Cisco IOS XE platforms, and NX to some extent. He has also
worked as a Senior Engineer with the Routing P...
In this session you can learn more about Layer 3 multicast and the best
practices to identify possible threats and take security measures. It
provides an overview of basic multicast, the best security practices for
use of this technology, and recommendati...