Specifying a range of IP addresses

Last Updated : Nov 06, 2012 |

Procedure

To specify a range of source and destination IP addresses to which the rule applies, use the commands source-ip and destination-ip, followed by the IP range criteria.

Choose one of the following options as the IP range criteria:

  • To specify a range, type two IP addresses to set a range of IP addresses to which the rule applies

  • To specify a single address, type host, followed by an IP address to set a single IP address to which the rule applies

  • To specify a wildcard, type host, followed by an IP address using wildcards to set a range of IP addresses to which the rule applies

  • To specify all addresses, type any to apply the rule to all IP addresses

Use the no form of the appropriate command to specify that the rule does not apply to the IP address or addresses defined by the command.

Example

The following command specifies a source IP address of 10.10.10.20 for rule 1 in access control list 301:

Gxxx-001(ACL 301/ip rule 1)# source-ip host 10.10.10.20

The following command allows any destination IP address for rule 3 in QoS list 404:

Gxxx-001(QoS 404/rule 3)# destination-ip any

The following command specifies a source IP address in the range 10.10.0.0 through 10.10.255.255 for rule 1 in access control list 301:

Gxxx-001(ACL 301/ip rule 1)# source-ip 10.10.0.0 0.0.255.255

The following command specifies a source IP address outside the range 64.236.24.0 through 64.236.24.255 for rule 7 in access control list 308:

Gxxx-001(ACL 308/ip rule 7)# no source-ip 64.236.24.0 0.0.0.255

The following command specifies a source IP address in the range 64.<any>.24.<any> for rule 6 in access control list 350:

Gxxx-001(ACL 350/ip rule 6)# source-ip 64.*.24.*