topic Pix 520 blocking IP address range in Network Security https://community.cisco.com/t5/network-security/pix-520-blocking-ip-address-range/m-p/400327#M558794 <P>I want to block all traffic from an IP range. What would be the best way to do this? We have a pix 520 running 6.3(3).</P> Fri, 21 Feb 2020 08:06:58 GMT bwaldrop01 2020-02-21T08:06:58Z Pix 520 blocking IP address range https://community.cisco.com/t5/network-security/pix-520-blocking-ip-address-range/m-p/400327#M558794 <P>I want to block all traffic from an IP range. What would be the best way to do this? We have a pix 520 running 6.3(3).</P> Fri, 21 Feb 2020 08:06:58 GMT https://community.cisco.com/t5/network-security/pix-520-blocking-ip-address-range/m-p/400327#M558794 bwaldrop01 2020-02-21T08:06:58Z Re: Pix 520 blocking IP address range https://community.cisco.com/t5/network-security/pix-520-blocking-ip-address-range/m-p/400328#M558796 <HTML><HEAD></HEAD><BODY><P>you need to configure an ACL on the 520 to do this..</P><P></P><P>eg, if you need to block from 10.1.1.0/28, you need to write the following ACL</P><P></P><P>access-list inside deny ip 10.1.1.0 255.255.255.240 any</P><P>access-list inside permit ip 10.1.1.0 255.255.255.0 any</P><P></P><P>access-group inside in interface inside</P><P></P><P>this will block any traffic from the subnet 10.1.1.0/28 and allow all other traffic from 10.1.1.0/24</P><P></P><P>hope this helps.. all the best..</P><P></P><P>Raj</P></BODY></HTML> Sun, 01 May 2005 04:34:59 GMT https://community.cisco.com/t5/network-security/pix-520-blocking-ip-address-range/m-p/400328#M558796 sachinraja 2005-05-01T04:34:59Z