Mulitple subnets on one Int, need to block communicationsbetween them but allow access to internet

First of all, the access-list should have a statement, which PERMITS certain traffic. There is an explicit "DENY ALL" at the end of any access-list (even though it's not shown). So, your "Out" access-list blocks certain subnets, and then it has a remaining world (basically it does not allow anything).

Second, how do you configure multiple subnets on the interface? Do you have primary and secondary IP addresses configured? Do you have broad subnet mask (i.e. supernet)? If all your subnets are in one "flat" Layer 2 network, then what prevents user to put a broad subnetmask and access other subnets?

Practically, if you have switch(es), you should define VLANs for different subnets, create a trunk to your 2600 router, and create subinterfaces for each VLAN. However, based on the fact that you show interface name Ethernet versus FastEthernet, you may have an old 2600 router with 10 Mbit interface, and this scenario may not work for you.

Good luck,

Mike

------ Cisco IP Phone Headset Adapters

Ok. I unfortunately don't have any switches capable of creating vlan's. That most certainly would be the way to go. Is there any way to block communications between subnets using just a

Sure if they're on different interfaces of the router.