mac access-list in 2950

[saruzzo]

Sorry for my bad english.
I've 3 2950 with 10 vlan and and a pix as gateway, and all work fine.
For each port I've one server. I need to isolated each server in the same vlan.
I can't use the port protected command because it work only for the port in same switch. I've read that 2950 don't support pvlan.
I've try to use the mac access-list extended command but I've not found how to apply the filter to a specific interface. Can you help me?
Thanks in advance.
Rosario

 

[gnomi]

Hi
are you looking for this?

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2950/12122ea2/2950scg/swacl.htm#wp1092483

Regards
M.

 

[saruzzo]

Thanks gnomi,

I had read the cisco documents before to wrote in this forum.
I had create the 'mac access-list extended xxx', but I can't apply it on an interface because I have not the 'mac access-group' command.
This is the configuration of the switch:

mac access-list extended xxx
deny any any

sw-housing11(config)#int fastEthernet 0/1
sw-housing11(config-if)#?
Interface configuration commands:
……………
ip
keepalive
lacp
load-interval
logging
mac-address Manually set interface MAC address
macro
mls
mvr
………………

I try this in a cisco WS-C2950-24 with c2950-i6q4l2-mz.121-22.EA3.bin, in an other 2950 with c2950-i6q4l2-mz.121-14.EA1a.bin and c2950-i6q4l2-mz.121-14.EA1a.bin IOS.

Many thanks for your help.
Rosario