Form your deny/permit statments like this:

access-list 1 deny 192.168.1.1
access-list 1 permit any

Substitute 192.168.1.1 for the IP address you want to block. Dont forget the permit at the end or every IP addr will be denied.

Then you must apply the ACL to the interface you want, and specifiy which direction. In this case, if you have a serial interface #0/1 connected to the Internet, it would look like below:

interface Serial0/1
ip access-group 1 out

Feel free to email me with more questions if you'd like.


From: Robert Canary <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: "[EMAIL PROTECTED] Redhat discusion list" <[EMAIL PROTECTED]>
Subject: [OFFTOPIC] Blocking IP at a Cisco
Date: Sun, 10 Nov 2002 20:52:02 -0600

I'm really sorry for this far off post...

I am trying to figure out how to block an internal IP address from going
out on the internet.  I just am not a Cisco person, and I am trying to
learn it.

Any help or pointers to some online docs would be great, I bought this
router second handed so I have no Cisco support stuff.

Thanks in advance :-)

--
robert canary



--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

_________________________________________________________________
Help STOP SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail



--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to