Have you put the addresses and masks in binary and tried to work it out for yourself? In the mask, 0 means "don't care" and 1 means "must match."
This is a quick answer due to a shortage of time and because I think you will learn best if you do it yourself. Priscilla At 05:38 PM 1/5/02, Hunt Lee wrote: >Thanks for the response guys :) But can anyone explain to me how do you >guys derive: > >10.10.10.40 0.0.0.7 & 10.10.10.48 0.0.0.1 > >And also, for the second statement, how do you know 48 has to be placed in >the fourth octet? > >I'm still very confused, but thanks for your help in advance. > >Best Regards, >Hunt Lee > > >""Gaz"" wrote in message >[EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > You're not wrong, spotted the previous mistake, you just missed off an > > address. That's a nice way of putting it eh? > > > > Changing your second line to Permit 10.10.10.48 0.0.0.1 will do the trick > > because it allows 48 and 49 through. > > > > Regards, > > > > Gaz > > > > > > ""Shengtao"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > I think "Permit 10.10.10.40 0.0.0.7" will allow 40-47, and you need > > another > > > statement " Permit 10.10.10.48 0.0.0.0" to allow 48 to get through. > > > > > > Am I worng? > > > > > > > > > ""Godswill HO"" wrote in message > > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > Hi, > > > > > > > > Try the following: > > > > > > > > IP access-list standard allowed > > > > Permit 10.10.10.40 0.0.0.7 > > > > Permit 10.10.10.49 0.0.0.0 > > > > > > > > The first permit statement allow addresses n.n.n.40 to n.n.n.48, while > > the > > > > last one allow address n.n.n.49. There is no way you can deny whole > > range > > > > without affecting other addresses with one single statement. > > > > > > > > When appliying it to your interface say: > > > > > > > > Router(config-if)#IP access-group allowed in > > > > > > > > Regards. > > > > Oletu > > > > > > > > ----- Original Message ----- > > > > From: Hunt Lee > > > > To: > > > > Sent: Friday, January 04, 2002 9:29 PM > > > > Subject: Access-List questions [7:31001] > > > > > > > > > > > > > Hello there, > > > > > > > > > > I need some help on Access-Lists: > > > > > > > > > > Say if I want to permit network access to only 10.10.10.1 - > > 10.10.10.254 > > > > > > > > > > I know you can simply use: > > > > > > > > > > Access-list 10 permit 10.10.10.0 0.0.0.255 > > > > > > > > > > However, if I want to only permit the range of 10.10.10.40 to > > > 10.10.10.49 > > > > > (inclusive), then what should I do? > > > > > > > > > > Any help is greatly appreciated. > > > > > > > > > > Best Regards, > > > > > Hunt Lee > > > > > IP Solution Analyst > > > > > Cable & Wireless > > > > _________________________________________________________ > > > > Do You Yahoo!? > > > > Get your free @yahoo.com address at http://mail.yahoo.com ________________________ Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31032&t=31001 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
