Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 3 subscribers
  • Views 6154 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Network Definitions / IP-Range

skaiser
Hi,

I have already searched the Forum, but found nothing usefull, or I didn't understand it...

1. I have a network 192.168.21.0/24, this network has several ranges:
192.168.21.1-20 (Static-IPs, Servers)
192.168.21.21-120 (Dynamic-IPs, Workstations)
192.168.21.121-160 (Static-IPs, Training-PCs)

Now I want to create a rule for eg. the Training-PCs to be not allowed to use the Http-Proxy

-So the first thing I can do is to define every single pc from 121-160 and  then create a network-group. 
-Or is there a way like defining a port range 2000:3000 ?

2. I have found something where the Netmask is used:

My network is: 192.168.21.0/24 -> 192.168.21.0-255

When I use 192.168.21.1/27 then I have 192.168.21.0-32, am I right?
When I use 192.168.21.33/25 then I have 192.168.21.33-160 ?

So if this is ok, and I change my network to reflect this I have another small question:

There is a PC:  IP 192.168.21.95/24
And a rule for: 192.168.21.33/25 to be allowed to use the proxy.

Is this PC allowed to use the proxy?

Thanks
Stefan


This thread was automatically locked due to age.
  • 0
    I didn’t mention what ASL version are you using. I recommend using the “Allowed networks” option in the HTTP proxy configuration interface. Here you can define, who is able to use the proxy or not.

    Unfortunately (in version 4.022) you can not use groups in here, so you have to create networks or hosts first.

     [ QUOTE ]
       Now I want to create a rule for eg. the Training-PCs to be not allowed to use the Http-Proxy. 

    [/ QUOTE ]

    Do it the other way around and just  allow  the HTTP proxy usage for different clients.
  • 0 in reply to FN-Eagle
    Hi,

    the proxy is only an example for everything else I whant to create a rule. The Astaro Version I'm using is 5.010.
    My main question is:
    Can I use 192.168.21.1-32 or 192.168.21.1/27 to define eg 192.168.21.1 to 192.168.21.32.

    Thanks
    Stefan
  • 0 in reply to skaiser
    i dont think that works, but i would try first. if it works, that would interest me too.
  • 0 in reply to skaiser
    From my point of view, you can use the following networks:

    192.168.21.0/27    = 192.168.21.1 – 192.168.21.31
    192.168.21.32/27  = 192.168.21.33 - 192.168.21.62
    192.168.21.64/27 = 192.168.21.65 - 192.168.21.94
    192.168.21.96/27 = 192.168.21.97 - 192.168.21.126
    192.168.21.128/27 = 192.168.21.129 - 192.168.21.158
    192.168.21.160/27 = 192.168.21.161 - 192.168.21.190
    192.168.21.192/27 = 192.168.21.193 - 192.168.21.222
  • 0

    Hi Stefan,

     

    off course you can use networks with submasks

    on the other hand the network definitions allows you to define a range

    Isn't this you are looking for?

     

    regards

    Peter

Unfiltered HTML