The first entry, by ending in .7, allows for 10.10.10.40-47, remember this is a span of 8. Then you need 48 and 49, hence the .1. The .40 and .48 are network addresses, I'll refer you to one of the many subnet calculators out there if thinking in binary is not yet second nature.
Brian "Sonic" Whalen Success = Preparation + Opportunity On Sat, 5 Jan 2002, Hunt Lee wrote: > Thanks for the response guys :) But can anyone explain to me how do you > guys derive: > > 10.10.10.40 0.0.0.7 & 10.10.10.48 0.0.0.1 > > And also, for the second statement, how do you know 48 has to be placed in > the fourth octet? > > I'm still very confused, but thanks for your help in advance. > > Best Regards, > Hunt Lee > > > ""Gaz"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > You're not wrong, spotted the previous mistake, you just missed off an > > address. That's a nice way of putting it eh? > > > > Changing your second line to Permit 10.10.10.48 0.0.0.1 will do the trick > > because it allows 48 and 49 through. > > > > Regards, > > > > Gaz > > > > > > ""Shengtao"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > I think "Permit 10.10.10.40 0.0.0.7" will allow 40-47, and you need > > another > > > statement " Permit 10.10.10.48 0.0.0.0" to allow 48 to get through. > > > > > > Am I worng? > > > > > > > > > ""Godswill HO"" wrote in message > > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > Hi, > > > > > > > > Try the following: > > > > > > > > IP access-list standard allowed > > > > Permit 10.10.10.40 0.0.0.7 > > > > Permit 10.10.10.49 0.0.0.0 > > > > > > > > The first permit statement allow addresses n.n.n.40 to n.n.n.48, while > > the > > > > last one allow address n.n.n.49. There is no way you can deny whole > > range > > > > without affecting other addresses with one single statement. > > > > > > > > When appliying it to your interface say: > > > > > > > > Router(config-if)#IP access-group allowed in > > > > > > > > Regards. > > > > Oletu > > > > > > > > ----- Original Message ----- > > > > From: Hunt Lee > > > > To: > > > > Sent: Friday, January 04, 2002 9:29 PM > > > > Subject: Access-List questions [7:31001] > > > > > > > > > > > > > Hello there, > > > > > > > > > > I need some help on Access-Lists: > > > > > > > > > > Say if I want to permit network access to only 10.10.10.1 - > > 10.10.10.254 > > > > > > > > > > I know you can simply use: > > > > > > > > > > Access-list 10 permit 10.10.10.0 0.0.0.255 > > > > > > > > > > However, if I want to only permit the range of 10.10.10.40 to > > > 10.10.10.49 > > > > > (inclusive), then what should I do? > > > > > > > > > > Any help is greatly appreciated. > > > > > > > > > > Best Regards, > > > > > Hunt Lee > > > > > IP Solution Analyst > > > > > Cable & Wireless > > > > _________________________________________________________ > > > > Do You Yahoo!? > > > > Get your free @yahoo.com address at http://mail.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31033&t=31001 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
