Please help to suggest a method to exclude IP range from

I have a access list 3100 to filter the traffic with rule 10 and now I have to exclude a pool from this acl 3100 and apply to acl 3110 in OAM service traffic classification.

acl 3100
rule 10 ## how can I implement to exclude this network rage
acl 3110
rule 10

Basically, you add an ACL entry before the larger range for the smaller range. So, in case you want to exclude (=permit) from a general deny for source net

10 permit ip any
20 deny ip any

The first ACL entry that matches is used. Most often, your entries are sorted by prefix length from longest (=most specific) to shortest (=least specific).

  • Great!! Logic is fine, but I have to match all traffic of which will pass to except to this last block of /17 subnet used for other classification in same router. Could you please review and suggest ? Jan 31 '19 at 1:48
  • Just swap permit and deny in the example.
    – Zac67
    Jan 31 '19 at 7:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.