Object-group PIX

[readyyy]

I have a question about an Object-group entry

network-object 01.01.01.01 255.255.255.255
network-object 01.01.01.02 255.255.255.255
network-object 01.01.01.03 255.255.255.255
network-object test2 255.255.255.255
network-object test 255.255.255.255

I think these entrys are host entys, which means that they are referring to a single host.

But i don't know why this is, because i thought that "255" means "any" ? So why it isn't 44.44.44.34 0.0.0.0 ?

 

[readyyy]

Comment: The 44.44.44.34 ist just a fantasy number, it could also be 01.01.01.01

 

[Supergrrover]

The 255's in this case are an IP netmask so they mean specifically.




Brent
Systems Engineer / Consultant
CCNP

 

[readyyy]

Hello

Thanks for your answer.

So this 255.255.255.255 isnt't that a Wildcard?


So this means that in this case, the 255 and 0 is used in the opposite way it is used normally?

 

[Supergrrover]

Yeah, a little confusing.



Brent
Systems Engineer / Consultant
CCNP

 

[SynAckAck]

You can also use

network-object host 01.01.01.01

You get the same effect and it might be more intuitive.

Remember 255.255.255.255 is broadcast when it is an address, not a mask.

-Dave

 

[voltron1011]

Remember, that PIX's are ars backwards on a few things. One of them being there is no wildcards.