What Is The Difference Between Network (Or Subnet) Masks And The Masks Used With Acls - HP ProCurve 6120G/XG Manual

Hp procurve series 6120 blade switches access security guide
Hide thumbs Also See for ProCurve 6120G/XG:
Table of Contents

Advertisement

What Is the Difference Between Network (or Subnet)
Masks and the Masks Used with ACLs?
In common IP addressing, a network (or subnet) mask defines which part of
the IP address to use for the network number and which part to use for the
hosts on the network. For example:
IP Address
Mask
18.38.252.195 255.255.255.0 first three octets
18.38.252.195 255.255.248.0 first two octets and the left-
Thus, the bits set to 1 in a network mask define the part of an IP address to
use for the network number, and the bits set to 0 in the mask define the part
of the address to use for the host number.
In an ACL, IP addresses and masks provide the criteria for determining
whether to deny or permit a packet, or to pass it to the next ACE in the list. If
there is a match, the deny or permit action occurs. If there is not a match, the
packet is compared with the next ACE in the ACL. Thus, where a standard
network mask defines how to identify the network and host numbers in an IP
address, the mask used with ACEs defines which bits in a packet's IP address
must match the corresponding bits in the IP address listed in an ACE, and
which bits can be wildcards.
Traffic Management and Improved Network Performance
Network Address
most five bits of the third octet third octet and all bits in the
IPv4 Access Control Lists (ACLs)
Host Address
The fourth octet.
The right most three bits of the
fourth octet.
9-27

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Procurve 6120xgProcurve 6120 series

Table of Contents