How do i block a host from the same network using acl?

[abdifarhan]

Hello, I'm using Cisco Packet Tracer 8.0. I wanted to block a particular host from communicating with other hosts. I've tried

access-list 110 deny ip host 192.168.1.2 host 192.168.1.100

and I've assigned the acl in the router interface, but this 1.2 client still able to communicate with 1.100. What did I do wrong?

[balaji.bandi]

Look at the example :

https://networklessons.com/cisco/ccie-routing-switching/vlan-access-list-vacl

[Mohsin Alam]

I am not sure what you meant by the term router, i am assuming it to me a multi layer switch.

You will need to use VACL for that if that's the case as switch works on MAC. 

## Make sure to mark post as helpful, If it resolved your issue. ##

[Georg Pauwen]

Hello,

A VACL would be a good solution, unfortunately, that feature is not supported in Packet Tracer. Your options are very limited, the interface command 'switchport protected' would work, as that would block all communication between the hosts connected to interfaces configured with that command.