Access Lists

[gczman]

I was wondering how to create an access list that will deny remote desktop reaching a certain IP subnet.

I am not sure of the access group in/out scenerio.

Any help would be great.

Thanks

 

[burtsbees]

ok---let's say the subnet to be denied is 10.10.10.0/24, and the LAN interface is fa0/0...
access-list extended block_rdc
deny tcp any 10.10.10.0 0.0.0.255 eq 3389
deny udp any 10.10.10.0 0.0.0.255 eq 3389
permit ip any any
interface fa0/0
ip access-group block_rdc in

Burt

 

[gczman]

Thanks, that worked perfectly.