address object strange behavour

[Gregoux]

Hi

I create a address object base on a network address like 192.168.21.0/20 and when I used it as source address in my policy base forwarding rule this never match

but when I create addresse object with a range like 192.168.16.1-192.168.31.254 and when I used it as source address in my policy base forwarding rule this match

what wrong ?

is it bug?

or

I need to use the network address like 192.168.16.0/20

[panos]

Which version ? panos ?

so 192.168.16.0/20 works but 192.168.21.0/20 not ? you mean

[Gregoux]

Which version ? panos ?

5.0.8

  so 192.168.16.0/20 works but 192.168.21.0/20 not ? you mean

YES exact

[kdd · Accepted solution]

Hi Gregoux,

if the netmask is /20 then the ip-range could be .16.0 - .31.255 but in case of 192.168.21.0/20 the address is a single host-address because /20 expresses ranges like 192.168.16.0 - 192.168.31.255 or

192.168.0.0 - 192.168.15.255 and so on. There is a conflict between the ip-address an the mask.

If the mask is /24 than range is 192.168.21.0 - 192.168.21.255 and will work.

Cheers Klaus