Monday, June 1, 2020

Having a senior moment - help with wildcard

Good morning folks. It's been a crazy week and I can't figure out why something was breaking during our turn up of a new site.

Gist:

we have a standard VTY ACL we use to limit SSH to 10/8 and block a couple servers. We had a unique situation where I needed to open it up to a few public IP's. When the necessary changes were made, it blocked all connection attempts.

working/usual:

access-list 44 deny 10.250.16.68 0.0.0.1

access-list 44 permit 10.0.0.0 0.255.255.255

access-list 44 deny any

not working:

access-list 44 deny 10.250.16.68 0.0.0.1

access-list 44 permit 10.0.0.0 0.255.255.255

access-list 44 permit 103.13.71.103 0.0.0.0

access-list 44 permit 160.202.13.0 0.255.255.255

access-list 44 deny any

I would like to note/point out that the 4th link was supposed to be a wild card of 0.0.0.255, as we wanted to just allow the whole /24. I don't think that was the cause because even just the 3rd line being added broke it.

Not sure what was going on, curious if anyone has any insight.



No comments:

Post a Comment