Re: [nsp] ACL's

From: Jesper Skriver (jesper@skriver.dk)
Date: Tue Oct 05 1999 - 14:03:42 EDT


On Tue, Oct 05, 1999 at 07:55:18PM +0200, Peter Salvage wrote:
> Hi all
>
> I'm trying to restrict telnet access to our router. What I did was
> create an access list like so:
>
> access-list 13 permit 192.168.0.0 0.0.0.255 which allows only access
> from that /24.
>
> and then...
>
> line vty 0 4
> access-class 13 in
>
> However, if I want to restrict access to ONE machine, say 192.168.0.8,
> what should the above read? access-list 13 permit 192.168.8.0
> 252.255.255.255??? I can't seem to get my head around the subnet mask
> <sigh>

access-list 13 permit host 192.168.0.8

aka

access-list 13 permit 192.168.0.8 0.0.0.0

It's not a subnet mask, but a wildcard mask

/Jesper

-- 
Jesper Skriver (JS4261-RIPE), Network manager      
Tele Danmark DataNet, IP section (AS3292)

One Unix to rule them all, One Resolver to find them, One IP to bring them all and in the zone to bind them.



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:06 EDT