anti spoofing acl error

[cpeloso]

Hi guys,
i'm putting on my pix 515 a simple anti spoofing acl (for example &quot;access-list 1 deny ip 192.168.0.0 0.0.255.255 any&quot but the system answers &quot;ERROR: Global address,mask <192.168.0.0,0.0.255.255> doesn't pair&quot;.
where i'm wrong?
thanks

 

[yizhar]

HI.

The pix access-list command uses subnet mask, unlike Cisco IOS routers which uses Wildcard bits.
So the correct syntax is:
access-list 1 deny ip 192.168.0.0 255.255.0.0 any

http://www.cisco.com/warp/public/110/pix_command_ref.shtml

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar