[SOLVED] Silly question on firewall aliases

[mimitair]

Say I have a Home vlan on 192.168.10.x/24 and a Guest vlan on 192.168.20.x/24.
I then create an alias encompassing the private IP addresses defined by the RFC1918 (10.x.x.x, 172.x.x.x and 192.168.x.x/16).
I then want to block all traffic coming in the guest vlan interface that is going out to the Home network. Does the 192.168.x.x/16 network in the alias also encompass the 192.168.10.x/24 network? Or should I add an extra network in the alias of private IP addresses specifically stating 192.168.10.x/24?

Thank you in advance for your reply.

Kind regards

[Seimus]

RFC1918 is the definition/standard that includes all Private addresses, so it will include all Private addresses and networks.

https://www.rfc-editor.org/rfc/rfc1918

Code Select Expand

IP Address: 192.168.0.0
Network Address: 192.168.0.0
Usable Host IP Range: 192.168.0.1 - 192.168.255.254
Broadcast Address: 192.168.255.255
Total Number of Hosts: 65,536
Number of Usable Hosts: 65,534
Subnet Mask: 255.255.0.0
Wildcard Mask: 0.0.255.255
Binary Subnet Mask: 11111111.11111111.00000000.00000000
IP Class: B
CIDR Notation: /16
IP Type: Private

Regards,
S.

[Bob.Dig]

Silly it is. Maybe this helps.
https://www.calculator.net/ip-subnet-calculator.html?cclass=any&csubnet=16&cip=192.168.0.0&ctype=ipv4&x=Calculate

[mimitair]

That makes sense. Thank you! :)