topic Re: Pix 525 Block internal computers in Network Security https://community.cisco.com/t5/network-security/pix-525-block-internal-computers/m-p/106499#M671448 <HTML><HEAD></HEAD><BODY><P>using the access list would be a little more difficult. If these ips you want to block are on a different subnet than your other users then just dont include them in any static or nat (#) commands. or you can do nat 0 if they are a private ip that way they are not natted and cannot get out to the internet</P></BODY></HTML> Tue, 19 Feb 2002 19:19:25 GMT chlovell 2002-02-19T19:19:25Z Pix 525 Block internal computers https://community.cisco.com/t5/network-security/pix-525-block-internal-computers/m-p/106496#M671444 <P>Hello....very new to using the Pix 525. I would like to block a range of private ip address within my private network blocking them from going to the interenet. I work for a school and have virtual networks setup with private ip addresses for each building. I have labs in some of these buildings and want to be able to block internet access to these labs and then turn them back on at a later date. How would I be able to do this. Thanks for your help!</P> Fri, 21 Feb 2020 05:59:00 GMT https://community.cisco.com/t5/network-security/pix-525-block-internal-computers/m-p/106496#M671444 m-norman 2020-02-21T05:59:00Z Re: Pix 525 Block internal computers https://community.cisco.com/t5/network-security/pix-525-block-internal-computers/m-p/106497#M671445 <HTML><HEAD></HEAD><BODY><P>You can limit use with the "nat" command or with access-lists. Either one will work, how you would do it will depend on how your IP addressing is setup internally.</P></BODY></HTML> Fri, 15 Feb 2002 19:20:49 GMT https://community.cisco.com/t5/network-security/pix-525-block-internal-computers/m-p/106497#M671445 pdentico 2002-02-15T19:20:49Z Re: Pix 525 Block internal computers https://community.cisco.com/t5/network-security/pix-525-block-internal-computers/m-p/106498#M671446 <HTML><HEAD></HEAD><BODY><P>Okay....I have an outside and inside interface on the pix would. I create an access list for the inside interface to deny a particular host to the outside interface? Again I apologize if I sound uneducated on this question. Thanks...</P></BODY></HTML> Fri, 15 Feb 2002 20:49:46 GMT https://community.cisco.com/t5/network-security/pix-525-block-internal-computers/m-p/106498#M671446 m-norman 2002-02-15T20:49:46Z Re: Pix 525 Block internal computers https://community.cisco.com/t5/network-security/pix-525-block-internal-computers/m-p/106499#M671448 <HTML><HEAD></HEAD><BODY><P>using the access list would be a little more difficult. If these ips you want to block are on a different subnet than your other users then just dont include them in any static or nat (#) commands. or you can do nat 0 if they are a private ip that way they are not natted and cannot get out to the internet</P></BODY></HTML> Tue, 19 Feb 2002 19:19:25 GMT https://community.cisco.com/t5/network-security/pix-525-block-internal-computers/m-p/106499#M671448 chlovell 2002-02-19T19:19:25Z