Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Block a specific ip...

Hello,

What is the command syntax to block a single incoming ip address on a pix515e?

TIA,

Gary

2 REPLIES
Bronze

Re: Block a specific ip...

Are you running 6 code or 7 code?

Re: Block a specific ip...

Hi .. try the shun command

In the following example, the offending host (10.1.1.27) makes a connection with the victim (10.2.2.89)

with TCP. The connection in the PIX Firewall connection table reads:

10.1.1.27, 555-> 10.2.2.89, 666 PROT TCP

If the shun command is applied in the following way:

shun 10.1.1.27 10.2.2.89 555 666 tcp

The preceding command would delete the connection from the PIX Firewall connection table, and it

would also prevent packets from 10.1.1.27 from going through the PIX Firewall. The offending host can

be inside or outside of the PIX Firewall.

If you use shun x.x.x.x it will block any packets coming from source x.x.x.x

I hope it helps .. please rate it if it does !!!!

91
Views
0
Helpful
2
Replies