02-19-2014 11:59 PM - edited 03-07-2019 06:18 PM
Hi guys. I just wanna ask if it's possible to block 192.168.98.2 pc from accessing the 192.168.99.11?
Router 0
interface GigabitEthernet0/0.98
encapsulation dot1Q 98
ip address 192.168.98.254 255.255.255.0
!
interface GigabitEthernet0/0.99
encapsulation dot1Q 99
ip address 192.168.99.254 255.255.255.0
!
VLAN 98 and VLAN 99 is already connect via Inter-Vlan. My problem now is, how can I block PC 192.168.98.2 from accessing PC 192.168.99.11?
Thanks
Best Regards,
Jaycer
Solved! Go to Solution.
02-20-2014 01:30 AM
Hello
access-list 100 deny ip host 192.168.98.2 host 192.168.99.11
access-list 100 permit ip any any
interface GigabitEthernet0/0.98
ip access-group 100 in
or
interface GigabitEthernet0/0.99
ip access-group 100 out
res
Paul
Please don't forget to rate any posts that have been helpful.
Thanks.
02-20-2014 12:56 AM
Hope this link helps you:
http://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-confaccesslists.html
Don't forget to rate the posts that are helpful.
Regards,
Chandu
02-20-2014 05:28 PM
Thank you also for this. Helps me to review my ACL
02-20-2014 01:30 AM
Hello
access-list 100 deny ip host 192.168.98.2 host 192.168.99.11
access-list 100 permit ip any any
interface GigabitEthernet0/0.98
ip access-group 100 in
or
interface GigabitEthernet0/0.99
ip access-group 100 out
res
Paul
Please don't forget to rate any posts that have been helpful.
Thanks.
02-20-2014 04:43 PM
Mr. pdriver thank you so much! Big help for me.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide