I am trying to create named extended access-lists on Cisco IOS on an 800 series router, but it changes the destination network to


ip access-list extended ACL-TEST
    permit tcp host eq 44818

is accepted with no errors, but then when I run "show access-lists" the output is:

Extended IP access list ACL-TEST
    10 permit tcp host eq 44818

What am I doing wrong? Thanks.

1 Answer 1


Access lists do not use an ordinary subnet mask. They use a "wildcard " mask. A wildcard mask is the ones complement of the subnet mask. So becomes

  • Yes, thanks, exactly, I had IOS and ASA syntax mixed up.
    – jdt
    Jun 20, 2017 at 17:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.