Secondary interface 1

[UNIX72]

I created a seconday interface which is 212.12.12.0 and my primary interface is 192.68.0.0. I need to configure the hosts on 212.12.12.0 not to send broadcast or ping the 192.68.0.0 network. Do i need a access-list for this? Can someone show me a sample config? The interfaces are on my ethernet port. Would i be better off creating 2 vlans. I'm trying to seperate my unix boxes with my windows pc's. (212.12.12.0 unix) and (192.68.0.0 windows), thanks.

 

[jeter]

the easier way would to be to set up additional vlans and seperate each applications .

 

[UNIX72]

Thanks jeter, but don't i need a 100mbps port on the router for trunking? My router has a 10mbps port, thanks

 

[Obewan]

You could definitly setup an ACL and group on the 192.68.0.0 network to deny any 212.12.12.0 network traffic e.g.Broadcast or ICMP. I will send you a sample config.


access-list 101 deny tcp 172.16.4.0
0.0.0.255 any eq
access-list 101 permit ip any any
(implicit deny any)
(access-list 101 deny ip 0.0.0.0
255.255.255.255
0.0.0.0 255.255.255.255)

interface ethernet 0
ip access-group 101 out