Help on access control list that is only ip with 192.168.2.6 mask 255.255.255.244 should be able to access internet and deny all

[malai.joseph]

Hi

kindly help on access control list that is only ip with 192.168.2.6 mask 255.255.255.244 should be able to access internet and deny all(what should be done on cisco router)
switch ip address is 192.168.2.2 mask 255.255.255.244
router ip address 192.168.2.1 mask 255.255.255.244
thx and nice day
joseph

NB.currently all computer are able to access internet,and i dont want this-i need only one pc 192.168.2.6 mask 255.255.255.244

[cadet alain · Accepted solution]

Hi, just do this:

-no access-list 102

-access-list 12 permit host 192.168.2.6

-ip nat inside source list 12 interface Gig0/1

Regards.

Alain.

[malai.joseph]

Alain

Thx

-access-list 12 permit host 192.168.2.6

-ip nat inside source list 12 interface Gig0/1

My plan is to have access to only this pc and other pc will pass thru this as it is safesquid to access internet

what about deny all?

how to do this

Joseph

[cadet alain · Accepted solution]

Hi,

My plan is to have access to only this pc and other pc will pass thru this as it is safesquid to access internet

what about deny all?

how to do this

What do you mean by that?

the ACL I proposed will only NAT this host so the others can't communicate with internet(due to implicit deny all at the end) .

if you want everybody to be disallowed from internet then simply do no NAT.

Regards.

Alain.