View Single Post
EdTheLad
Resident Underachiever
Registered Member
 
EdTheLad's Avatar
 
Join Date: May 2005
Location: Globe trotter, nfa
Posts: 1,537

Certifications: CCNP/CCIP/IE Written
EdTheLad is just really niceEdTheLad is just really niceEdTheLad is just really niceEdTheLad is just really nice
Old 01-11-2009, 10:07 AM   #6 (permalink)

You dont seem to understand how the extended access-list works with filtering.

The source portion matches the network number, the destination portion matches the mask.

access-list 101 deny ip 192.168.2.0 0.0.0.255 255.255.255.252 0.0.0.0

this will block networks 192.168.2.0 -> 192.168.2.255 , which have a /30 mask.



__________________
If you're not in you won't win, if you don't go you won't know.


Last edited by EdTheLad; 01-11-2009 at 10:13 AM.
EdTheLad is offline   Reply With Quote