We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now


Cisco ACL Permit Range

Medium Priority
Last Modified: 2008-01-09

I want to permit all traffic to the following IP range: - - what entry would i add to an acl?

I have tried permit ip *.*.*.* any but am unsure how to calculate the *.*.*.*.

Watch Question

Les MooreSr. Systems Engineer
Top Expert 2008

permit ip any

This will include hosts - .14

You would have to exclude .9 and .14 explicitly:
deny ip host any
deny ip host any
permit ip any

The mask is a wildcard mask instead of subnet mask.
Take the subnet mask that you would calculate to include the addresses that you want and subtract from
                       0 .   0.   0.   7 = wildcard mask ( or more accurately, and 'inverse' mask)


Is their any way around having to exclude .9 and .14 explicitly?
Sr. Systems Engineer
Top Expert 2008
No. Masks only go so far. You have to break up into maskable "chunks"
The only mask that will include 10 - 13 is / 30 only includes .9 and .10 with .11 as broadcast / 30 only includes .13 and .14 with .15 as broadcast
The only way to get both 10 and 13 in the same mask is to go one bit back to .29 / 29 includes .9 through .14 with .15 as broadcast
With wildcard masks you can do even/odd numbers, but that still wouldn't give you the desired results to include 10, 11, 12 and 13
Your other option is to explicitly include each of the 4 IP's and all others are blocked by the implicit deny all
 permit ip host any
 permit ip host any
 permit ip host any
 permit ip host any

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.