Blocking an IP addrss on a Cisco Router:

Cisco 2700 router and I wish to block certain IP's from getting past it....

Thanks..
Mark

Yeah...

You should prolly look for a how to to on applying and using ACLs, Access lists..

You need to create an access-list, and then enable that list on an interface.
Ex:

access-list Foo deny ip host a.b.c.d any

(replace a.b.c.d with IP you wish to block)

Then add that list to the outside interface:

int eth0 (or whatever your interface is)
ip access-group Foo in

Then save your config.

Make sure the deny list is on top of the allow lists.


Got2Go

got2go..

He also needs to change the implicit deny all to implict allow..

so
access-list Foo allow any

I'm kind of doubting there are already ACLs applied to the router so the deny any is still there..

True..True...