Pri/Sec Network

leowchongwei · ‎11-23-2003

Hi,

I have router interface configured with a primary and secondary ip address...eg

F0/0

192.168.1.0/24,

192.168.2.0/24 sec

how can i prevent the network from accessing each other...

Thanks

-Steven-

tbaranski · ‎11-23-2003

With an inbound access list on the f0/0 interface.

leowchongwei · ‎11-23-2003

how shd the command line be?

kkalaycioglu · ‎11-24-2003

Something like this:

access-list 110 deny ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255

access-list 110 deny ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255

access-list 110 permit ip any any

And then apply this ACL tý th interface inbound direction.

int fa0/0

ip access-group 110 in