Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations IamaSherpa on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Csico 1100

Status
Not open for further replies.

WNelson28

IS-IT--Management
May 21, 2003
70
GB
Hi folks...not sure if I'm not getting something here but I'm presumin if I configure the above AP to only forward traffic from set IP's to any other IP this would almost add an extra layer of protection should some spotty oik manage to connect to it as they would need to know what IP to give it? My other question is, when I put the IP's in on the filter, when I type them in as 172.16.9.x they appear as 0.0.0.x when I actually apply the change....is that right?

Thanks

Will
 
I am not 100% sure what you are asking but the question regarding the filters is probably an inverse subnet mask issue. i.e. if you are typing something like:

access-list 100 permit 172.16.9.0 255.255.255.0

Then it will appear as:

access-list 100 permit 0.0.0.0 255.255.255.0

in the config. You need to invert the subnet mask. If you want to allow 172.16.9.0/24 then it should read:

access-list 100 permit 172.16.9.0 0.0.0.255


HTH

Andy

 
Thanks for the reply. What I'm trying to do is give the AP a list of 5 IP's that it will forward traffic for so any other IP that may get connected, the traffic won't get passed on.

So how would I do it for a set IP and not a range as 172.16.9.0?

Thanks

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top