Step by Step instruction to block IP address Cisco 2600

Posted on 2005-03-19
Medium Priority
Last Modified: 2010-05-18
We have a Cisco 2600 router. We need Step by step instruction to keep IP address from going out to the internet.

We want it to only be allowed on our local network

Bob Ross

Question by:bross073097
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2

Expert Comment

ID: 13584733
"ip route null0 "
should kill it off.

Expert Comment

ID: 13584742
and step-by-step instructions:
telnet into router
enter password
go into priviledged mode (command: enable)
enter enable password
go into configuration (conf t)
go into your internet interface information (you didnt specify what kind of internet you have and how it's connected)
then type that command i posted earlier w/o the "'s and then exit/exit
then you can do a 'wr mem' to save changes.
LVL 50

Accepted Solution

Don Johnston earned 2000 total points
ID: 13585343
Determine which interface goes out to the internet (serial 0/0, serial 0/1, fastethernet 0, etc)

console or telnet into the router.
enter the following commands. <text> = a variable

password: <enable password>
Router#conf t
Router(config)#access-list 50 deny
Router(config)#access-list 50 permit any
Router(config)#interface <serial 0/0> (or whatever the interface that connects to the internet is)
Router(config-if)#ip access-group 50 out
Router#copy run start


Author Comment

ID: 13585907
Thanks. It all entered in with out a return of any errors.

I will be able to test later.

Thank you so much.


Author Comment

ID: 13585924
donjohnston, please contact me off list if your interested.

bross@kingmanaz.net I have a full router configure in a couple weeks or less when we switch providers.

The router has not been touched much in the last 5 years.

Bob Ross

Featured Post

Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have seen some questions on problems with SSH/telnet access to Cisco routers that may occur despite the fact that from a PC connected to your LAN, Internet connectivity is in place and users can access Internet sites without any issues.  There are…
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question