> Acls don’t support ranges, only prefixes. You don’t want the whole /24. I think you want: > > acl net1 {192.168.1.0/26; 192.168.1.64/27; 192.168.1.96/30; } > acl net2 {192.168.1.100/30; 192.168.104/29; 192.168.1.112/28; 192.168.1.128/26; 192.168.1.192/29; } thanks guys :-)