1

Is

deny tcp any host 1.1.0.0 0.0.255.255

correct,when I want to block access to the 1.1.0.0/16 subnet for any host on the LAN?

1
  • 1
    Cisco makes routers and firewalls which could potentially filter traffic. Which product are you asking about?
    – This
    Sep 2 '14 at 8:07
2

Presuming it is an ASA/FWSM it is:

deny tcp any 1.1.0.0 255.255.0.0 [log]

The log portion is optional depending on the version being run. Specifying "host" would only be if you are going to specify access to be denied to a single host, for example:

deny tcp any host 1.1.1.1 [log]

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.