To block the network range of 192.168.160.0 to 192.168.191.0, you need to use a wildcard mask that covers that address range.
The range from 192.168.160.0 to 192.168.191.255 can be derived as follows:
- The first three octets (192.168.) are fixed, and we are concerned with the last octet.
- The address range spans from 160 to 191 in the third octet.
You can combine the subnet mask of 255.255.224.0 (which corresponds to a /19 prefix) to encompass the addresses from 192.168.160.0 to 192.168.191.255.
Given the options, you want to find the correct wildcard mask. The wildcard mask for 255.255.224.0 is 0.0.31.255.
Therefore, the correct access control entry (ACE) to block this range is:
access-list 10 deny 192.168.160.0 0.0.31.255
So the correct answer is:
access-list 10 deny 192.168.160.0 0.0.31.255.
1 answer