> acl myNet src 10.0.0.0-200.0.0.1/255.255.255.0 This is wrong. What exactly are you trying to do? You want all class C subnets between 10.0.0.0/24 and 200.0.0.0/24? That's not a range that can be easily caught with a single subnet-mask. You're probably better off to state only the subnets you want, like acl myNet src 10.0.0.0/255.255.255.0 acl myNet src 169.254.0.0/255.255.0.0 acl myNet src 200.0.0.0/255.255.255.0 Joost
