acl

[Reindl Harald]

Am 08.10.2016 um 15:14 schrieb Pol Hallen:
> Hi all :-)
>
> can someone advice me about a fully howto / handbook to understand ACL?
>
> I need to permit all network 192.168.1/24 and deny 192.168.1.50/24 host:
>
> acl test0 { !192.168.1.50/24; 192.168.1/24;};

192.168.1/24 is not a valid netmask
192.168.1.0/24 -> 192.168.1.1 - 192.168.1.254

192.168.1.50/24 is not a valid netmask
192.168.1.0/24 -> 192.168.1.1 - 192.168.1.254

honestly go to http://jodies.de/ipcalc and test what your proposed 
netmasks are doing

hint: using /24 everywhere is nonsense and what you are trying here (if 
it's accepted at all) is do allow and deny the actly same range by lack 
of understanding how network masks are working