1

Is

deny tcp any host 1.1.0.0 0.0.255.255

correct,when I want to block access to the 1.1.0.0/16 subnet for any host on the LAN?

Improve this question
1
  • 1
    Cisco makes routers and firewalls which could potentially filter traffic. Which product are you asking about?
    – Mike Pennington
    Commented Sep 2, 2014 at 8:07

1 Answer 1

Reset to default
2

Presuming it is an ASA/FWSM it is:

deny tcp any 1.1.0.0 255.255.0.0 [log]

The log portion is optional depending on the version being run. Specifying "host" would only be if you are going to specify access to be denied to a single host, for example:

deny tcp any host 1.1.1.1 [log]
Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.