Cisco 2900 XL Question

[star3132]

I am a novice networking user and am trying to use a Cisco Catalyst 2900 XL to block certain ports from our network. Certain users are using the network to use AOL Instant Messanger, Yahoo, KaZaa, Etc. during class and we are trying to stop it. Also, we would like to block Internet access (on port 8002 due to Proxy) at certain times.
To accomplish this, the only way I can see is to assign access-lists to the switch. I have the following lists:

access-list 102 allow tcp any any eq 524 (524 is the networking port ? to allow users to save files to network.)

The switch is connected by Port #3 to a fiber line to the main server. To impliment the rule, I have found this command:

interface fastethernet 0/3
ip access-group 102 out
ip access-group 102 in

However, the fastethernet port does not reconize this command.. I am not sure if i have given enough information, but if you can decipher what I mean, please help!

-Anthony Warren

 

[baddos]

You can't do this with this switch. The 2900 switch is layer2 only. You can only do this on a layer3 switch or a router.

-Bad Dos

 

[star3132]

Thanks for the quick response!

Is there any other way to block these ports using the Cisco Switch? Or is there another piece of hardware, such as a firewall or router, we would need to buy? Thanks.

-Anthony

 

[BuckWeet]

Firewall is what you need, if you want to be cheap you could always do a BSD/Linux based firewall...


BuckWeet

 

[jgercken]

Any router will be able to do acess-lists but, once again, I concur with BuckWeet that a firewall is what you really need. If you don't trust yourself with BSD Cisco's PIX is nice, as is Sonicwall's. ----------------------------------------
Wasabi Pop Tarts! Write Kellogs today!