access-list on a 2500 series router

[ccrespoh]

Hello,

I want to deny the traffic from a concrete IP connected to the 2500 series router and I would like to do it in the router. Is it enough adding a command 'access-list 6 deny 192.168.148.13' to reject the packets from that address or it's necessary another statement?

Thanks in advance.

[pkajekar · Accepted solution]

You also need to use the ACL on the interface into which the traffic comes.

Use the 'ip access-group 6 in' on the interface.

in specified that packets coming into this interface need to be inspected.