cisco pix default netmask

Discussion in 'Cisco' started by dima.kagan, Nov 6, 2006.

  1. dima.kagan

    dima.kagan Guest


    I have a question, to which I couldn't find an answer by searching
    google and cisco docs.

    Let's say I insert a following command in cisco pix cli:

    name test-network

    What is the default netmask given by pix for this network, if any? Do I
    have to speficy a netmask with a different command, before using this
    object in an acl, for example?

    The PIX version is 6.3, if it matters.

    dima.kagan, Nov 6, 2006
    1. Advertisements

  2. There is no netmask with names. The name command substitutes the IP address
    with a name regardless of the context, the address is used.
    Lutz Donnerhacke, Nov 6, 2006
    1. Advertisements

  3. dima.kagan

    Brian V Guest

    It doesn't, you still need to specify it.
    test-network would be 10.X.X.X
    test-network would be 10.1.X.X
    test-network would be 10.1.0.X
    test-network would be host
    Brian V, Nov 6, 2006
  4. dima.kagan

    dima.kagan Guest


    Thanks for the reply.

    Yes, I understand this is like an alias.
    However, if I use test-network in an acl, like this:

    access-list inside_access_in permit tcp test-network any eq ssh

    How will the firewall interpret the 'test-network' object in this case:
    3. Some other way(?)
    dima.kagan, Nov 6, 2006
  5. dima.kagan

    dima.kagan Guest


    I got it now. Tried to use it without netmask and got an error.

    Dilemma solved!
    dima.kagan, Nov 6, 2006
  6. The response will be
    Illegal command: access-list inside_access_in permit tcp any eq ssh
    If you want to do this right, please use:

    name test-network
    name slash-29
    access-list inside_access permit tcp test-network slash-29 any eq ssh
    Lutz Donnerhacke, Nov 6, 2006
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.