IP Address comparisons

Per the conversation on IP Address comparisons in XACML on today’s call:

I also favor the /24 network mask notation. The / notation supports defining subnets independent of octet byte boundaries, meaning you could use 192.168.2.0/23 to define a subnet that has 512 nodes and whose netmask is 255.255.254.0. I don’t think wildcard syntax can represent such subnets, as it appears to be entirely octet oriented.

Topic change:

XACML core spec section A.2 Data Types describes the format of an IPv4 IPAddress as:

ipAddress = address [ "/" mask ] [ ":" [ portrange ] ]

Where is the syntax of portrange defined? I couldn’t find anything on port ranges in the cited RFC 2396.

-Danny

Danny Thorpe

Authorization Architect

Dell | Identity & Access Management, Quest Software

Quest Software is now part of Dell.

xacml message