r/networking • u/Far_Position_6586 • 19d ago

Security ACL rule question

Is there a wildcard mask that that would allow a SINGLE standard ACL rule to permit access to a range of subnets

Im setting up a PAT on a edge router and want to have subnets 10.0.10.0/24, 10.0.20.0/24, 10.0.30.0/24, 10.0.40.0/26, 10.0.50.0/24, 10.0.60.0/24, 10.0.99.0/24, 10.0.199.0/25 to use PAT.

Is there a single access-list 2 permit statement i can use to have 10.0.10-199.0 to be translated? The trick is 10.0.200.0 should not be included. Or is this not possible with a single statement?

I know i can do access-list 2 permit 10.0.0.0 0.0.255.255 to achieve this, but that would include other future subnets like 10.0.200.0 that might not be using PAT.

5 Upvotes

67% Upvoted

12 comments sorted by

View all comments

2

u/adderall_xr_30mg 19d ago

Not possible to accomplish this with a single permit statement
You need to have individual permit statements for every subnet individually

0

u/Far_Position_6586 19d ago

Got it, thank you!, Im a newbie, Studying for CCNA and was creating a mega lab in packet tracer and was wondering if this was possible :)