Grant/Deny access to a group of computers

I am trying to limit access to only a few computers.
Win 2003 IIS 6

I followed Article 166003
http://support.microsoft.com/default.aspx/kb/166003

Example:
(Class C Address with custom subnet mask)
Network ID: 200.200.200.128
Subnet Mask: 255.255.255.192
IP Addresses Effected: 200.200.200.128 to 200.200.200.191

However this does not work.
If I use anything other then 0 in the last octet of the subnet mask, all
computers except for 200.200.200.128 are blocked. If I use 0 then all
200.200.200.xxx are allowed. When what I want is 200.200.200.128 to
200.200.200.191.

Thanks in advance
Olaf

Re: Grant/Deny access to a group of computers

I don't get you. using .192 netmask - the valid host range is .129 to 190
..128 will be network id and 192 is the broadcast address.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Olafub" wrote in message
news:3CE337F2-6963-479B-89A7-E1E87F9AB27B@microsoft.com...
>I am trying to limit access to only a few computers.
> Win 2003 IIS 6
>
> I followed Article 166003
> http://support.microsoft.com/default.aspx/kb/166003
>
> Example:
> (Class C Address with custom subnet mask)
> Network ID: 200.200.200.128
> Subnet Mask: 255.255.255.192
> IP Addresses Effected: 200.200.200.128 to 200.200.200.191
>
> However this does not work.
> If I use anything other then 0 in the last octet of the subnet mask, all
> computers except for 200.200.200.128 are blocked. If I use 0 then all
> 200.200.200.xxx are allowed. When what I want is 200.200.200.128 to
> 200.200.200.191.
>
> Thanks in advance
> Olaf
>
>

Re: Grant/Deny access to a group of computers

Thanks for the links. I'll take a look.

The IP's I used were just an example.

I'm trying to allow 10.18.53.53 thru 10.18.53.58 access.
So I've granted access to 10.18.53.53(255.255.255.251)

This does not work. So I end up using (255.255.255.0)
This allows 10.18.53.all which is not what I want.

Thanks
Olaf

"Bernard Cheah [MVP]" wrote:

> I don't get you. using .192 netmask - the valid host range is .129 to 190
> ..128 will be network id and 192 is the broadcast address.
>
> --
> Regards,
> Bernard Cheah
> http://www.iis.net/
> http://www.iis-resources.com/
> http://msmvps.com/blogs/bernard/
>
>
> "Olafub" wrote in message
> news:3CE337F2-6963-479B-89A7-E1E87F9AB27B@microsoft.com...
> >I am trying to limit access to only a few computers.
> > Win 2003 IIS 6
> >
> > I followed Article 166003
> > http://support.microsoft.com/default.aspx/kb/166003
> >
> > Example:
> > (Class C Address with custom subnet mask)
> > Network ID: 200.200.200.128
> > Subnet Mask: 255.255.255.192
> > IP Addresses Effected: 200.200.200.128 to 200.200.200.191
> >
> > However this does not work.
> > If I use anything other then 0 in the last octet of the subnet mask, all
> > computers except for 200.200.200.128 are blocked. If I use 0 then all
> > 200.200.200.xxx are allowed. When what I want is 200.200.200.128 to
> > 200.200.200.191.
> >
> > Thanks in advance
> > Olaf
> >
> >
>
>
>

Re: Grant/Deny access to a group of computers

Thanks for the links, I'll take a look.

The ip's I used were just an example.

I'm trying to allow 10.18.53.53 thru 10.18.53.58.
I've set it up like this 10.18.53.53(255.255.255.250)
This is not allowing anyone but 10.18.53.53 access.
So I've changed it to (255.255.255.0) which allows 10.18.53.all

Thanks
Olaf

"Bernard Cheah [MVP]" wrote:

> I don't get you. using .192 netmask - the valid host range is .129 to 190
> ..128 will be network id and 192 is the broadcast address.
>
> --
> Regards,
> Bernard Cheah
> http://www.iis.net/
> http://www.iis-resources.com/
> http://msmvps.com/blogs/bernard/
>
>
> "Olafub" wrote in message
> news:3CE337F2-6963-479B-89A7-E1E87F9AB27B@microsoft.com...
> >I am trying to limit access to only a few computers.
> > Win 2003 IIS 6
> >
> > I followed Article 166003
> > http://support.microsoft.com/default.aspx/kb/166003
> >
> > Example:
> > (Class C Address with custom subnet mask)
> > Network ID: 200.200.200.128
> > Subnet Mask: 255.255.255.192
> > IP Addresses Effected: 200.200.200.128 to 200.200.200.191
> >
> > However this does not work.
> > If I use anything other then 0 in the last octet of the subnet mask, all
> > computers except for 200.200.200.128 are blocked. If I use 0 then all
> > 200.200.200.xxx are allowed. When what I want is 200.200.200.128 to
> > 200.200.200.191.
> >
> > Thanks in advance
> > Olaf
> >
> >
>
>
>

Re: Grant/Deny access to a group of computers

that's not a valid range.
if it is just 5 IP, key in one by one.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Olafub" wrote in message
news:891ACEA0-AC14-4B1A-86AD-600CA6AF4B12@microsoft.com...
> Thanks for the links, I'll take a look.
>
> The ip's I used were just an example.
>
> I'm trying to allow 10.18.53.53 thru 10.18.53.58.
> I've set it up like this 10.18.53.53(255.255.255.250)
> This is not allowing anyone but 10.18.53.53 access.
> So I've changed it to (255.255.255.0) which allows 10.18.53.all
>
> Thanks
> Olaf
>
> "Bernard Cheah [MVP]" wrote:
>
>> I don't get you. using .192 netmask - the valid host range is .129 to 190
>> ..128 will be network id and 192 is the broadcast address.
>>
>> --
>> Regards,
>> Bernard Cheah
>> http://www.iis.net/
>> http://www.iis-resources.com/
>> http://msmvps.com/blogs/bernard/
>>
>>
>> "Olafub" wrote in message
>> news:3CE337F2-6963-479B-89A7-E1E87F9AB27B@microsoft.com...
>> >I am trying to limit access to only a few computers.
>> > Win 2003 IIS 6
>> >
>> > I followed Article 166003
>> > http://support.microsoft.com/default.aspx/kb/166003
>> >
>> > Example:
>> > (Class C Address with custom subnet mask)
>> > Network ID: 200.200.200.128
>> > Subnet Mask: 255.255.255.192
>> > IP Addresses Effected: 200.200.200.128 to 200.200.200.191
>> >
>> > However this does not work.
>> > If I use anything other then 0 in the last octet of the subnet mask,
>> > all
>> > computers except for 200.200.200.128 are blocked. If I use 0 then all
>> > 200.200.200.xxx are allowed. When what I want is 200.200.200.128 to
>> > 200.200.200.191.
>> >
>> > Thanks in advance
>> > Olaf
>> >
>> >
>>
>>
>>