Because, but default, ComOS *IGNORES* user netmasks. This is because
before CIDR/VLSM was supported, you couldn't effectively honor them. And
then turning them on by default would have destroyed routing for too many
people who had bogus entries in RADIUS, etc, which had never bit them because
they'd been ignored.
You need to turn this on:
'set user-netmask on'
Then the user setting will be honored.
> Netmask: 255.255.255.255 255.255.255.240
Note that this is a PORT setting (on the right) and will be utterly and
completely ignored when the port is used for dialin/out. These settings
are only used for Hardwired ports.
Also - you do know that any single IP user MUST have 255.255.255.255 as
their netmask, right? If the user actually had .240 as a mask you'd be
routing multiple IPs over that link. Do you WANT to route multiple IPs
to the user?
-MZ
-- <URL:mailto:megazone@megazone.org> Gweep, Discordian, Author, Engineer, me.. Join ISP/C Internet Service Providers' Consortium <URL:http://www.ispc.org/> "A little nonsense now and then, is relished by the wisest men" 781-788-0130 <URL:http://www.gweep.net/> <URL:http://www.megazone.org/> Hail Discordia! - To unsubscribe, email 'majordomo@livingston.com' with 'unsubscribe portmaster-users' in the body of the message. Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>