mac address ACL

[paublo]

Cisco IOS Software, 7200 Software (C7200-IS-M), Version 12.4(10), RELEASE SOFTWA
RE (fc1)

is it possible to apply a mac address ACL on the router version above.

I can certainly create the ACL but can seem to figure out how to allow it. Everything i tried only works for L3 ACLs.

any ideas

thanks, Paul

 

[unclerico]

Can you explain in more detail what you're trying to achieve??

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[North323]

sounds like you are trying to do port security based on a MAC address?

 

[paublo]

basically i have a bunch of route bridged atm connections. I want to filter based on mac. So certain mac's dont get an ip address when they plug in to their dsl line.

 

[North323]

http://www.tek-tips.com/viewthread.cfm?qid=1431844&page=1

 

[paublo]

apparently with cisco switches you have a lot more mac filter options like port security on cisco routers you are limited to mac ACL's on bridged interfaces only.

thanks for the replies, Paul

 

[burtsbees]

The user wants mac-address based acl's, not port security...

router#mac access-list extended bla
router(config-ext-nacl)#permit host 0000.861f.3745 host 0006.5bd8.8c2f

http://www.cisco.com/en/US/products...s_configuration_example09186a0080470c39.shtml

/


tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[paublo]

this will not work on a 7200 only on a switch.

 

[burtsbees]

Sorry, never tried on a router, and was thinking of a 6509 for some reason...my apologies...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[Minue]

Hello
MAC address ACL are work at layer 2 when configures.So the router must be in bridge mode.Below is an excerpt from a production router.

interface FastEthernet0/0
duplex auto
speed auto
bridge-group 1
bridge-group 1 input-pattern-list 1198

access-list 1198 permit 0000.0000.0000 feff.ffff.ffff 0000.0000.0000 feff.ffff.ffff

Regards