Pix 525 Block internal computers
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-15-2002 07:30 AM - edited 02-20-2020 09:59 PM
Hello....very new to using the Pix 525. I would like to block a range of private ip address within my private network blocking them from going to the interenet. I work for a school and have virtual networks setup with private ip addresses for each building. I have labs in some of these buildings and want to be able to block internet access to these labs and then turn them back on at a later date. How would I be able to do this. Thanks for your help!
- Labels:
-
Other Network Security Topics
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-15-2002 11:20 AM
You can limit use with the "nat" command or with access-lists. Either one will work, how you would do it will depend on how your IP addressing is setup internally.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-15-2002 12:49 PM
Okay....I have an outside and inside interface on the pix would. I create an access list for the inside interface to deny a particular host to the outside interface? Again I apologize if I sound uneducated on this question. Thanks...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-19-2002 11:19 AM
using the access list would be a little more difficult. If these ips you want to block are on a different subnet than your other users then just dont include them in any static or nat (#) commands. or you can do nat 0 if they are a private ip that way they are not natted and cannot get out to the internet
