Blocking Protocols

Amin Shaikh · ‎08-13-2008

Is there a way to block telnet/ssh/icmp/pop3 on all host for a specific VLAN.

Example : We have 10 VLANS configured on the backbone switch and on one VLAN we would like to block traffic in/out telnet/ssh/icmp/pop3

rkhalil · ‎08-13-2008

Apply an acl on interface Vlan10..

Config example:

!

interface Vlan10

ip access-group 101 in

ip access-group 101 out

!

access-list 101 deny tcp any any eq telnet

access-list 101 deny tcp any any eq 22

access-list 101 deny tcp any any eq pop3

access-list 101 deny icmp any any

!

Regards,

Raul

(Please rate helpful posts)

Giuseppe Larosa · ‎08-13-2008

hello Raul,

i would add

access-list 101 permit any any

at the end or everything will be blocked !

Regards

Giuseppe