Needing to drop packets ingress and egress.

[gladeeaytur]

I have a 4430 that is used for 802.1Q routing only. The firewall is not active. Using AOS is their a way to drop packets from/to specific IP addresses.

Example

drop from 0.0.0.0 0.0.0.0 to 98.98.98.98 255.255.255.255

drop from 98.98.98.98 255.255.255.255 to 0.0.0.0 0.0.0.0

[jayh · Accepted solution]

If you just don't want a specific IP or subnet to pass through the device you can null-route it without invoking the firewall.

Your example above would be configured with:

ip route 98.98.98.98 255.255.255.255 null 0

[cj_]

This is good to know, jayh.