Solved

How to block incoming traffic to my switch

Posted on 2014-03-27
3
230 Views
Last Modified: 2014-04-05
HI,

lately i have this problem where when ever my pcs connect to the LAN i get virus.

I would like to block all the traffic accept the specific server traffic i need for the pcs to access.

any one know how this can be done with cisco catalyst 2950.

i have try access-list 1 deny 192.168.1.1 but when try to ping from the pc i still can access the host ip 192.168.1.1


pls help
0
Comment
Question by:tankergoblin
3 Comments
 
LVL 7

Expert Comment

by:Alex Green
ID: 39958632
Rather than blocking all traffic which is essentially what you will do, have you considered upgrading your AV software so it actually works?
0
 
LVL 17

Expert Comment

by:lruiz52
ID: 39959276
Post your sanitized switch config.   I agree with Alex, check your AV software.
0
 
LVL 45

Accepted Solution

by:
Craig Beck earned 500 total points
ID: 39960288
I agree with the other experts, but if you really want to do it at the switch level you can use VLAN access-maps...

http://blog.ine.com/2009/08/10/vlan-access-control-lists-vacls-tiers-1/

You might find that your version of IOS doesn't support VLAN access-maps though, but the feature is supported on the 2950.

This will put unnecessary pressure on the switch as every single packet will need to be inspected to see where it needs to go, so it should be a last resort.
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The worst thing when starting a new job is when the previous Network Administrator left behind no documentation. How do you get into the devices? If you've been in this situation or just accidently mistyped your password, this article will hopefully…
I see many questions here on Experts Exchange regarding switch port configurations and trunks. This article is meant for beginners in the subject to help to get basic knowledge about Virtual Local Area Network (VLAN (http://en.wikipedia.org/wiki/Vir…
In a recent question (https://www.experts-exchange.com/questions/28997919/Pagination-in-Adobe-Acrobat.html) here at Experts Exchange, a member asked how to add page numbers to a PDF file using Adobe Acrobat XI Pro. This short video Micro Tutorial sh…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question