Access list - Block one ip or port - I just it to stop !

[Andrewchandler1973]

I have a layer 3 switch, 3550.

I have several vlans on there just for playing around with. One of the vlans, has a vonage linksys box attached to it with a UK number attached. From time to time telemarketers call at 03:00 in the morning, this as I'm sure you can imagine is not much fun. The linksys box gets 192.168.3.3 as it's ip.

The switch is connected to a non cisco router at 192.168.0.1

interface FastEthernet0/24

no switchport

ip address 192.168.0.2 255.255.255.0

I was thinking a time based access list would work best

I have tried several variations but the phone still rings.

I have tried

access-list 1 deny host 192.168.3.3

permit .....

and more extensive lists but the phone still rings. I have not applied the time-range yet, so that's not the problem.

I have applied the list to the vlan interface and to fa0/24 but it's not working.

Where should I apply it? What am I missing?

Thanks!

[Edison Ortiz · Accepted solution]

Try

access-list 101 deny ip any host 192.168.3.3

access-list 101 permit ip any any

interface FastEthernet0/24

no switchport

ip address 192.168.0.2 255.255.255.0

ip access-group 101 in

[Andrewchandler1973]

Thanks I tried exactly that last night and it left the phone still on. For some reason it needs a minute or two to take, not sure why but that solved it. Thanks

[Andrewchandler1973]

I've started having some issues with this phone. How do I apply the best qos solution to this port? I've looked at auto qos voip but that's not going to do it, I didn't think it would... I know QOS is the way to go with this but I cant find a simple example/how to to help me figure this one out.

Thanks