Cisco command

[O'Neil]

Hi,

I work in private company, and I've came across VPN request, they need a kiosk to access an application, the request forum was requesting the following IP and port:
10.236.177.5 port 3389

the responsible guy of ACL wrote the following:

permit tcp 10.254.22.0 255.255.255.0 10.236.177.5 255.255.255.255 eq 3389

now i get "permit tcp", but whats with (10.254.22.0)? Could it be the kiosk IP?
the second ip for how many users (255.255.255.0) which is 255
the 3rd part is the application ip (10.236.177.5)
then what does this IP mean (255.255.255.255)?
then the port 3389

could someone please explain to me the command, and any resources will be great ,thanks alot :)

[smferoz]

Hi,

It is the ip of Kiosk (10.254.22.0) and 255.255.255.0 and 255.255.255.255 is classless subnetting and it is not classfull Subnetting.

[c-tech]

Hi O'Neil
The access list is configured to allow traffic from all the hosts in the kiosk network 10.254.22.0 to access host 10.236.177.5 via remote desktop protocol (port 3389).
In access lists, 255 means that the value must match exactly while a zero means the value can be anything from 0 to 254.

Hope this sorts you out. If you only need to allow one host only from the Kiosk network to access the i.p 10.236.177.5, then the access list should be permit tcp x.x.x.x 255.255.255.255 10.236.177.5 255.255.255.255 eq 3389 where x.x.x.x is the i.p permitted.