Re: IPSec Question
From: Steven L Umbach (n9rou_at_nscomcast.net)
Date: 05/29/04
- Previous message: Steven L Umbach: "Re: Configure Secure Screen Saver En Masse"
- In reply to: MikeD: "IPSec Question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 29 May 2004 01:08:41 GMT
>From my testing it seems that ipsec policies demand the proper subnet mask
for the network type - A, B,or C. --- Steve
"MikeD" <madienes@hotmail.com> wrote in message
news:1488801c444e6$2a7034e0$a501280a@phx.gbl...
>
> Hi,
>
> I have been messing around on a test server looking into
> IPSec and ran into somewhat of an issue.
>
> First I created an implicit deny rule for all
> inbound/outbound traffic, I then proceeded to create an
> allow rule for anything on our network using a 16-bit
> mask. e.g. Allow 192.168.0.0 255.255.0.0 but IPSec came
> back with an error saying IP Address did not match the
> mask.
>
> My gut is telling me that IPSec only allows 24-bit IP's
> to be defined and not 16, is that the case or am I just
> doing something wrong?
>
> Thanks, Mike.
- Previous message: Steven L Umbach: "Re: Configure Secure Screen Saver En Masse"
- In reply to: MikeD: "IPSec Question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]