Cisco PIX Filter Allow commands to allow a RANGE of IPs

I have 300 IPs I need to add to the PIX filter this week.
most are in ranges (ie, xxx.xxx.xxx.1 through xxx.xxx.xxx.50) over about 6 subnets
so, I'm hoping for a way to allow a range rather than doing 300 individual lines of code. Maybe cut it to about 10 or 20
jskewesAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
lrmooreConnect With a Mentor Commented:
Pretty much. You might want to create object groups if there is any change that different rules get applied to different IPs or groups of IPs
Which model PIX and what OS version?
0
 
lrmooreCommented:
You can only group by subnet masks.
0
 
jskewesAuthor Commented:
so, I have to do 300 lines of code?
0
Building an Effective Phishing Protection Program

Join Director of Product Management Todd OBoyle on April 26th as he covers the key elements of a phishing protection program. Whether you’re an old hat at phishing education or considering starting a program -- we'll discuss critical components that should be in any program.

 
jskewesAuthor Commented:
PIX 515
not sure of OS version
0
 
Tim HolmanCommented:
Adding 300 lines of similar code shouldn't be too much of a headache?  You can manipulate using notepad/cut/copy/paste, and then copy and paste the notepad output straight into your telnet window.
0
 
Tim HolmanCommented:
PS - There are NO shortcuts in security !!  :)
0
 
jskewesAuthor Commented:
in good security anyway...
0
 
lrmooreCommented:
We can do port ranges in access-lists, but not source or destination ip address ranges. Only subnets.
At least with the 515 you have enough horsepower to parse through them all. I hope you're using turbo acls....
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.