cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1542
Views
0
Helpful
1
Replies

How do I import and block IP addresses by country?

millycorry2010
Beginner
Beginner

I need to block IP traffics from a certain country. I know I can export a free IP address list from firewall IP generator. The sample output format for Cisco ACL is as below.

What should I do next to import the list to enable blocking in Cisco AXA? I don't want to enter it manually.

 

# -------------------------------------------------------
# Free IP2Location Firewall List by Country
# Source: https://www.ip2location.com/free/visitor-blocker
# Last Generated: 19 Nov 2018 05:20:52 GMT
# [Important] Please update this list every month
# -------------------------------------------------------
deny ip 201.220.192.0 0.0.31.255 any
deny ip 200.55.178.96 0.0.0.31 any
deny ip 200.55.178.80 0.0.0.7 any
deny ip 200.55.178.64 0.0.0.15 any
deny ip 200.55.178.56 0.0.0.7 any
1 Accepted Solution

Accepted Solutions

Abheesh Kumar
Rising star
Rising star

Hi,

You can just create an access-list with the IP's you downloaded and bind it to the outside interface.

For example.

access-list BLOCK_LIST extended deny ip 201.220.192.0 0.0.31.255 any
access-list BLOCK_LIST extended deny ip 200.55.178.96 0.0.0.31 any
access-list BLOCK_LIST extended deny ip 200.55.178.80 0.0.0.7 any

 

access-group BLOCK_LIST in interface Outside

 

HTH

Abheesh

 

View solution in original post

1 Reply 1

Abheesh Kumar
Rising star
Rising star

Hi,

You can just create an access-list with the IP's you downloaded and bind it to the outside interface.

For example.

access-list BLOCK_LIST extended deny ip 201.220.192.0 0.0.31.255 any
access-list BLOCK_LIST extended deny ip 200.55.178.96 0.0.0.31 any
access-list BLOCK_LIST extended deny ip 200.55.178.80 0.0.0.7 any

 

access-group BLOCK_LIST in interface Outside

 

HTH

Abheesh

 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers