topic Re: address object strange behavour in General Topics

address object strange behavour

Gregoux — Thu, 23 Jan 2014 09:01:45 GMT

I create a address object base on a network address like 192.168.21.0/20 and when I used it as source address in my policy base forwarding rule this never match

but when I create addresse object with a range like 192.168.16.1-192.168.31.254 and when I used it as source address in my policy base forwarding rule this match

what wrong ?

is it bug?

I need to use the network address like 192.168.16.0/20

Re: address object strange behavour

Retired Member — Thu, 23 Jan 2014 09:19:28 GMT

Which version ? panos ?

so 192.168.16.0/20 works but 192.168.21.0/20 not ? you mean

Re: address object strange behavour

Gregoux — Thu, 23 Jan 2014 09:34:29 GMT

Which version ? panos ?

5.0.8

so 192.168.16.0/20 works but 192.168.21.0/20 not ? you mean

YES exact

Re: address object strange behavour

kdd — Thu, 23 Jan 2014 10:35:18 GMT

Hi Gregoux,

if the netmask is /20 then the ip-range could be .16.0 - .31.255 but in case of 192.168.21.0/20 the address is a single host-address because /20 expresses ranges like 192.168.16.0 - 192.168.31.255 or

192.168.0.0 - 192.168.15.255 and so on. There is a conflict between the ip-address an the mask.

If the mask is /24 than range is 192.168.21.0 - 192.168.21.255 and will work.

Cheers Klaus