Quick Help With ACL's

[mdmartz]

Let's say that my network (A) is 172.100.0.24/29
There is another network (B) that is 65.111.200.0

I want to deny the lower 4 IP addresses of network A (172.100.0.24-27) access to the second half of network B (65.111.200.128-255)

I am not sure what the access-list would look like.

access-list 101 deny tcp 172.100.0.? 0.0.0.? 65.111.200.? 0.0.0.?

Any help?

Thanks in advance.

-Matt

 

[watchguardmonkey]

access-list 101 deny tcp 172.100.0.24 0.0.0.28 65.111.200.128 0.0.0.25 eq to any