02-19-2014 11:59 PM - edited 03-07-2019 06:18 PM
Hi guys. I just wanna ask if it's possible to block 192.168.98.2 pc from accessing the 192.168.99.11?
Router 0
interface GigabitEthernet0/0.98
encapsulation dot1Q 98
ip address 192.168.98.254 255.255.255.0
!
interface GigabitEthernet0/0.99
encapsulation dot1Q 99
ip address 192.168.99.254 255.255.255.0
!
VLAN 98 and VLAN 99 is already connect via Inter-Vlan. My problem now is, how can I block PC 192.168.98.2 from accessing PC 192.168.99.11?
Thanks
Best Regards,
Jaycer
Solved! Go to Solution.
02-20-2014 01:30 AM
Hello
access-list 100 deny ip host 192.168.98.2 host 192.168.99.11
access-list 100 permit ip any any
interface GigabitEthernet0/0.98
ip access-group 100 in
or
interface GigabitEthernet0/0.99
ip access-group 100 out
res
Paul
Please don't forget to rate any posts that have been helpful.
Thanks.
02-20-2014 12:56 AM
Hope this link helps you:
http://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-confaccesslists.html
Don't forget to rate the posts that are helpful.
Regards,
Chandu
02-20-2014 05:28 PM
Thank you also for this. Helps me to review my ACL
02-20-2014 01:30 AM
Hello
access-list 100 deny ip host 192.168.98.2 host 192.168.99.11
access-list 100 permit ip any any
interface GigabitEthernet0/0.98
ip access-group 100 in
or
interface GigabitEthernet0/0.99
ip access-group 100 out
res
Paul
Please don't forget to rate any posts that have been helpful.
Thanks.
02-20-2014 04:43 PM
Mr. pdriver thank you so much! Big help for me.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: