IP ADDRESSING

[mdmaqdoom]

I  want to block some ip on my network, 

this IP are primary IP in my Network (Some Devices has a default IP's i have many vendor devices that has same IP binded i want to Block on my network) 

One Devices is connected on FA2/5 (IE 115 Switch ) other devices is connected on 2960X (Gi1/2/20)

kindly please suggest the command (it can done by IP access list) please give the complete command 

thanks 

Maqdoom.M

[Seb Rupik · Accepted solution]

Hi there,

I suggest you look at DHCP snooping and IP Source Guard. 

Assuming all of your devices use DHCP; dynamic allocation or static assignment, then any device which appears on the network trying to use an address not received from your DHCP server will have its traffic discarded.

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/security/configuration_guide/b_sec_3se_3850_cg/b_sec_3se_3850_cg_chapter_01101.html

cheers,

Seb.

[Martin L]

i like that idea; DHCP snooping and IP Source Guard, plus possible to add ARP inspection
kudos!

[mdmaqdoom]

Can do some with ip access list 

plz suggest I wo not have any dhcp on my network only I have two swithces interface from where my vendor IP are connected I need to block this ip

[mdmaqdoom]

I was doing as per your suggestion but on the same interface I have two ip one Mac I cannot block the mac but only the bindded ip of vendor specified 
this also I can achieve On firewall or router by doing NAT but cannot afford the router for one ip devices 

any alternate plz suggest 

regards 

maqdoom