I have three service group,
WWW, SMTP and FTP. I wanted to isolate using
wildcard mask and divide them in logical subnet.
Example: We have 192.168.100.0/24 subnet, In short i want to give 50% IPs to WWW and 25% - SMTP and rest 25% FTP
www - 128 host smtp - 64 host ftp - 64 host
My ACL will be like this.
access-list 101 permit tcp any 192.168.100.0 0.0.0.127 eq www access-list 101 permit tcp any 192.168.100.128 0.0.0.63 eq smtp access-list 101 permit tcp any 192.168.100.192 0.0.0.63 eq ftp
But i want to use
object-group and there you can't use wildcard so how do i adjust above mask in object-group with subnetmask?
is following is correct in respect of
object-group network WWW-ACL 192.168.100.0 255.255.255.128 object-group network SMTP-ACL 192.168.100.128 255.255.255.192 object-group network FTP-ACL 192.168.100.191 255.255.255.192
Define them in ACL
access-list 101 permit tcp any object-group WWW-ACL eq www access-list 101 permit tcp any object-group SMTP-ACL eq www access-list 101 permit tcp any object-group FTP-ACL eq www