cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
306
Views
0
Helpful
1
Replies

Pix 520 blocking IP address range

bwaldrop01
Level 1
Level 1

I want to block all traffic from an IP range. What would be the best way to do this? We have a pix 520 running 6.3(3).

1 Reply 1

sachinraja
Level 9
Level 9

you need to configure an ACL on the 520 to do this..

eg, if you need to block from 10.1.1.0/28, you need to write the following ACL

access-list inside deny ip 10.1.1.0 255.255.255.240 any

access-list inside permit ip 10.1.1.0 255.255.255.0 any

access-group inside in interface inside

this will block any traffic from the subnet 10.1.1.0/28 and allow all other traffic from 10.1.1.0/24

hope this helps.. all the best..

Raj

Review Cisco Networking for a $25 gift card