From: xin tang (tonyxintang@yahoo.com)
Date: Fri Feb 28 2003 - 23:00:34 GMT-3
I saw a question somewhere which requires to configure
an
ACL using as few lines as possbile to accomplish this:
deny tcp from subnet 102.17.63.0/24
deny tcp from subnet 126.22.61.0/24
deny tcp from subnet 111.22.57.0/24
deny tcp from subnet 125.33.101.0/24
and permit all other ip traffic
The solution is something like
access-list 110 deny tcp 100.0.33.0 27.55.94.255 any
access-list 110 permit ip any any
However, this ACL will block traffic from other
subnets as well, for
example, traffic from subnet 103.0.33.0/24 will be
blocked.
Any idea on a valid solution?
Thanks.
This archive was generated by hypermail 2.1.4 : Sat Apr 05 2003 - 08:51:30 GMT-3