ACLs

[fb_webuser]

How to block/permit specific hosts/range of hosts within a subnet?

---

Posted by WebUser Haroon David Peter

[cadet alain]

Hi,

This is too vague to give an answer.Tell us what you want to block exactly and explain the topology of your network so we can provided you with the best correct answer.

Regards.

Alain

[Latchum Naidu]

Hi,

If you want block some range of IP's to access some network you can do that with extended access-list like below.
Assuming the source network is 192.168.2.0/24 and destination network is 10.10.2.0/24 The the access-list would be like below.

int vlan10
ip address 192.168.2.1 255.255.255.0

ip access-group vlan10 in

int vlan20
ip address 10.10.2.1 255.255.255.0

ip access-list ext vlan10
deny ip 192.168.2.0 0.0.0.255 10.10.2.0 0.0.0.255

Still as mentioned by Alen, tell us what you want block and little about the topology.

Please rate the helpfull posts.
Regards,
Naidu.