Cisco Access-Lists

[dmking43]

I would like to create an Access-List that would isolate all traffic for 1 Ethernet Segment on a 3640 router but allow Internet Browsing only. The 3640 has 4 Ethernet Ports. I want this one segment to be a test environment and I do not want any of the ther segments seeing any traffice form it, Server, Workstations, Printers, Etc.

any help would be apppreciated, Thanks
Dave

 

[hexn]

----------------------------------------
interface e0
ip access-group 101 in
ip access-group 101 out
!
access-list 101 permit tcp any any eq 80
----------------------------------------

That'll do it. Just add it to the ethernet interface where your protected ethernet segment will be.

 

[dmking43]

Thanks for the response, I will give it a try