port restricting

[ciscostudent4567]

having problems with users sending inappropriate packets, trying to configure Cisco2950 Switch to block ports.
Need a step by step if possible and of course a descript of how to unblock.

 

[mtashiro]

Use access-lists and apply them to the "problem" ports.

For example:

access-list 100 deny tcp any any eq 80
access-list 100 permit ip any any

interface fa0/1
ip access-group 100 in

The above blocks all

http://WWW trafic

and allows everything else from a client connected to switch port fa0/1.

To disable the ACL use the 'no" form of the command.
For example: "no ip access-group 100 in"

See the following link and look for access-list

http://www.cisco.com/en/US/products...ommand_reference_chapter09186a0080150b68.html