> I have a 1600 router running a 12021 IP PLUS --- I have tried to 
> add access-lists to block all sites incoming except 192.100.34.100-> 150. 

>Can someone help with the correct lists. 

- jvd wrote:
> 
> This is interesting. Obviously one solution is to deny the 50
> hosts with 50 deny statements.
> 
> Will this solution work? It uses 12 statements.
> 
> access-list 110 deny ip host 192.100.34.110
> access-list 110 deny ip host 192.100.34.111
> access list 110 deny ip 192.100.34.112 0.0.0.16
> access-list 110 deny ip 192.100.34.128 0.0.0.16
> access-list 110 deny ip host 192.100.34.143
> access-list 110 deny ip host 192.100.34.144
> access-list 110 deny ip host 192.100.34.145
> access-list 110 deny ip host 192.100.34.146
> access-list 110 deny ip host 192.100.34.147
> access-list 110 deny ip host 192.100.34.148
> access-list 110 deny ip host 192.100.34.149
> access-list 110 deny ip host 192.100.34.150
> access-list 110 permit any
> 
Oops, I found a mistake in the access list. The 3rd and 4th lines should be:
access list 110 deny ip 192.100.34.112 0.0.0.15
access-list 110 deny ip 192.100.34.128 0.0.0.15



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=71761&t=71696
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to