«

[chazman]

I have a PC on my internal network (172.16.92.229) identified with a virus. I want to kick it off the network and wait for the helpdesk line to call with connectivity problem. Sounds simple: nope.

I attempted to set a route for this offending PC (not a company PC, just someone plugged into an RJ45 outlet) and get "inconistent address and mask."

Here is my existing route (minus my public IP):
ip local pool dialup 172.16.92.43 172.16.92.47
ip route 0.0.0.0 0.0.0.0 172.16.92.8
ip route 10.0.0.0 255.255.255.0 172.16.92.8
ip route 10.0.2.0 255.255.255.0 172.16.92.8
ip route 10.1.1.125 255.255.255.255 172.16.92.8
ip route 10.10.10.0 255.255.255.0 172.16.92.8
ip route 10.99.2.0 255.255.255.0 172.16.92.8
ip route 172.17.17.0 255.255.255.0 172.16.92.8
ip route 172.31.0.0 255.255.255.0 172.16.92.8
ip route 192.168.92.0 255.255.255.0 172.16.92.8
ip route 192.168.100.0 255.255.255.0 172.16.92.8

interface GigabitEthernet0/0
description Connection to LAN
ip address 172.16.92.1 255.255.252.0
duplex auto
speed auto
media-type rj45
negotiation auto
no keepalive
no mop enabled

Is there a better way to kick this PC off my network, if not any ideas on why/how I can resolve the "inconsistent" error would be GREATLY appreciated.

Thanks ya'll!

Chazman - newbie

[mbilgrav]

you can do a null0 router - i.e route to the "bit bucket"
ex:
ip route 169.254.0.0 255.255.0.0 Null0

But this doesnt really help you much - you want to shutdown the switchport he is in.

[mbilgrav]

ups - i forgot to answer your question:

"inconistent address and mask."
means that you typed in something like:
ip route 172.16.92.229 255.255.255.0 172.16.92.8
This !"network" doesnt match the mask, as this is a host route, the mask are /32 ie 255.255.255.255
Try this:
ip route 172.16.92.229 255.255.255.255 Null0
as per my previouly post

(btw do you realize all your route statements macth the default route)