Solved

ACL on Cisco 3560

Posted on 2013-06-12
1
421 Views
Last Modified: 2013-07-15
Hello Experts,

I have ACL's on a few internal VLAN's and folks are beginning to require the use of Webex. The website says this:

WebEx services are offered over the following IP ranges:

66.163.32.0 - 66.163.63.255
209.197.192.0 - 209.197.223.255
173.243.12.0 - 173.243.12.255 (Subnet)

http://www.webex.com/webexconnect/orgadmin/help/index.htm?toc.htm?17161.htm

Can I use an IP-range command or do I need to list each of these networks individually?

Or for example, just opening a full class B? Would you recommend against this? I can still be more granular on the edge firewall as the ACL's are more flexible. (Also I know the website says it is generally not recommended but it seems they don't change IP's very often.)

66.163.x.x
209.197.x.x

Also, do I specify the command with the mask or the wild card? For example 255.255.0.0 or 0.0.255.255?

Thanks Experts!
0
Comment
Question by:zequestioner
1 Comment
 
LVL 45

Accepted Solution

by:
Craig Beck earned 500 total points
ID: 39243804
ACLs use wildcards, so 0.0.0.255 format.

You shouldn't just specify a whole /16 - that would defeat the object of the ACL, unless you're wanting to allow access to Apple (they have their own /8).

Your ACL should look something like this...

ip access-list extended WebEx
 permit ip any 66.163.32.0 0.0.31.255
 permit ip any 209.197.192.0 0.0.31.255
 permit ip any 173.243.12.0 0.0.0.255
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Juniper SRX 210H Throwing Error umass0: BBB reset failed, IOERROR 4 34
CCNA lab 6 37
cisco 2800 cannot ping lan 4 21
Use of vpn-filter value  in S2S VPN 2 33
This tutorial will go through the steps required to write a script that will back up the configuration settings of a HP-ProCurve switch. You will need to get the following things to follow this tutorial: Telnet Scripting Tool e.g. TST10.exe …
In the hope of saving someone else's sanity... About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question