RE: access-list

From: Paglia, John (USPC.PCT.Hopewell) (JPaglia@xxxxxxxxxxxxx)
Date: Thu Jul 11 2002 - 18:23:41 GMT-3


   
Try 'access-list 100 perm tcp 192.168.1.0 0.0.0.254
     'access-list 100 deny any

the 254 in the 4th octet of the wildcard mask says that the last octet in
the ip address has to have a zero in the one-bit place, while all the other
bits are in a "don't care" status. If the one bit has to be a zero, you are
blocking all odd numbers in the last octet.

This should work. One things for sure...you definately do not have to
specifically permit every even address in the network!!! Coudl you imagine
the size of that list, and the Carpal Tunnel Syndrome you would have when
you finished typing it???

Pags

> -----Original Message-----
> From: Andy McLaughlin [SMTP:andy@andymcl.com]
> Sent: Thursday, July 11, 2002 4:57 PM
> To: ccielab@groupstudy.com
> Subject: Re: access-list
>
> I don't think that you can block just odd addresses from a C class without
> explicitly denying each address that you do not want. If you block the
> whole thing then no one can get through. You can not use a different mask
> because that will still block even numbered addresses and let through odd
> numbered ones.
>
> I think that you will need to explicitly define each address that you do
> not
> want or change your addressing scheme.
>
> Andy
>
> ----- Original Message -----
> From: <Hemant_Kumar@BERLEX.COM>
> To: <ccielab@groupstudy.com>
> Sent: Thursday, July 11, 2002 3:12 PM
> Subject: access-list
>
>
> > Hi all,
> >
> > This might a small problem but i am not able to figure it out.
> >
> > I have classs C address eg 192.168.1.0
> >
> > I would like to block all the workstation with odd numbers as their ip
> > address? What is simplest way to achive this using access list.
> >
> > thanks
> > Hemant



This archive was generated by hypermail 2.1.4 : Sat Sep 07 2002 - 19:36:26 GMT-3