HOW TO BLOCK A SPECIFIC IP ADDRESS

[faithful4u]

hi

give me the steps that how to block a specific ip address and also a mac address. give me some details about access-list. thanks you.

 

[cisconooblet]

You have to create your access list and then apply it to an interface for either incoming or outgoing traffic. This is a good link.

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml

CCNA, BCNE, Security+, Network +

 

[nyy1023]

Faithful - what are you trying to accomplish?
ACL's are used to permit and/or deny traffic, ip, ports incoming or outgoing. This can be done via standard or extended depending on what you are looking to do.

Your question is a bit vague.

 

[faithful4u]

give me the steps for standard access-list

 

[Almin]

Here is an example of how to block certain Ip's from telneting into a device

R1(config)#access-list 99 deny 10.1.1.3
R1(config)#line vty 0 4
R1(config-line)#access-class 99 in
R1(config-line)#end
R1#

so the PC on the LAN with the network 10.1.1.3 is not able to open up a telnet session to R1. Yu could also block the whole /8 subnet by changing the ip address from 10.1.1.3 to 10.0.0.0

BTW Telnet should be disabled anyway but this is just an example of standard access list...

 

[faithful4u]

Thanks,

give me steps how to block ip address on network from accessing internet and also how to block Mac address of that specific computer.