03-03-2015 08:37 PM - edited 03-07-2019 10:56 PM
Hello All,
i have a question. how can i block printing on subnet or vlan on Cisco switch
i would like to block 172.16.20.1 0.0.3.255 subnet to not print.
the printers ips are 172.16.12.20
172.16.12.21
172.16.12.22
Thanks
Solved! Go to Solution.
03-04-2015 10:05 PM
Hi,
you can use this below ACL.
ip access-list extended blockprinter
deny ip 172.16.20.0 0.0.3.255 172.16.12.20 0.0.0.3
permit ip any any
HTH
Regards,
VS.Suresh.
*Plz rate the usefull posts *
***********Plz do rate this post if you found it helpful*************************
03-05-2015 03:22 AM
Which switch has the SVI for the 172.16.20.x network ?
So on a 172.16.20.x client what is the default gateway on that client ie. what IP address.
You need to find the switch with an "interface vlan <x>" with that IP address configured.
Then you need to apply the acl Suresh provided eg -
int vlan <x>
ip address 172.16.20.x 255.255.252.0
ip access-group blockprinter in
Jon
03-03-2015 10:52 PM
You have two choices:
1. You have three IP addresses, so you can create an ACL which includes the three IP address from contacting the printer server.
2. Or you can create an ACL for the entire subnet.
03-04-2015 12:45 AM
can you please tell me the commends ? to block only printers
03-04-2015 03:27 AM
Read THIS.
03-04-2015 07:33 PM
if you can please tell me the exact command that will be good.
Thanks
03-04-2015 10:05 PM
Hi,
you can use this below ACL.
ip access-list extended blockprinter
deny ip 172.16.20.0 0.0.3.255 172.16.12.20 0.0.0.3
permit ip any any
HTH
Regards,
VS.Suresh.
*Plz rate the usefull posts *
***********Plz do rate this post if you found it helpful*************************
03-05-2015 03:18 AM
do i need to create this access list in core switch ?
it is still allow, it did not block the printers.
i have tested it both in core switch and client switch it did not block printers.
Thanks
03-05-2015 03:22 AM
Which switch has the SVI for the 172.16.20.x network ?
So on a 172.16.20.x client what is the default gateway on that client ie. what IP address.
You need to find the switch with an "interface vlan <x>" with that IP address configured.
Then you need to apply the acl Suresh provided eg -
int vlan <x>
ip address 172.16.20.x 255.255.252.0
ip access-group blockprinter in
Jon
03-08-2015 10:57 PM
Thanks, it has blocked,
03-08-2015 11:02 PM
Thank you Suresh,
i would like to setup VOIP for my office, can you please tell me what is the requirements.
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide