Telnet ACL gone bad

[raceman3]

This should be a piece of cake but for the life of me I can't get the acl on my vty port to work correctly. All I want to do is limit telent to the router so only addresses 10.anything have access, ie internal addresses. I've seen numerouse examples out here and have tried several and they end up blocking telnet completely

The last one I tried was as follows

access-list 10 permit 10.0.0.0 0.0.0.255
line vty 0 4
access-class 10 in

This doesn't terminate my existing telnet sessions but if I try to fire up a second telnet session it is blocked. Remove the acl and I can telnet as much as I want.

 

[commsguy]

If you want 10.anything your wildcard mask should be 0.255.255.255

commsguy

http://www.convetech.com

 

[raceman3]

Typo on my part, it is 0.255.255.255. Same results. Wouldn't have anything to do with HSRP running and I'm typring this in on the backup router so I can test it ?

 

[raceman3]

Never mind, major brain fade, forgot my address was being natted, works fine