Sample Access List

Blocking 1 IP - access list 1 deny (deny host For Single IP)
Blocking whole network  - access list 1 deny
Allow All - access list 1 permit any

Apply to Interface - int Fa0/1
ip access-group 1 out 

If the commands get accidentally placed on FA0/1 as  INBOUND of the right router, it will still block the IPs but will also block them from the rest of the network.

Popular Posts