Security

I am configuring rules as well as alias for guest access

I want to know whether i have to enable the "invert" option in the alias else not ?

Here is the snapshot

The "invert" makes the rule opposite.

So for example if you define host 192.168.1.1 as a destination. If you enable "invert" the rule will hit EVERY OTHER ip than the one in the rule.

Same with networks. If you define 192.168.1.0 as a network and enable invert, the rule will hit EVERY OTHER network than the one in the rule.

What do you mean by the rule will hit EVERY OTHER ip than the one in the rule ?

i have define the 2 networks

172.16.0.0

192.168.0.0 and enable the invert option.

Now please again tell me what do you mean by above statement ?

You mean after enabling the invert the rule will not be implemented on the above networks ?

Yes, the invert rule will not be implementet in the above networks, but in all other networks than the ones defined.

Maybe it will be easier to understand if you look at the definition of the word "invert":

Thankyou soo much sir for your kind cooperation...

Problem resolved. :)