topic Hi damir2405If you want to in Network Security

Denying MAC and IPs on same interface

Damir Reic — Tue, 12 Mar 2019 04:43:41 GMT

Hi,

i have a C1921 router and i would like to have ACL that dines some IPs and some MACs on internal interface. Is that possible to do? I know that you can have only 1 ACL per interface and that probably you can't combine MAC and Ip addresses in one ACL so just wanted to confirm that is not possible.

Maybe some other way to do what i want?

Hi damir2405If you want to

rvarelac — Tue, 09 Sep 2014 19:19:19 GMT

Hi damir2405

If you want to block a MAC address on a Cisco router please follow the next procedure:

class-map MACBLOCKED

match source-address mac xxxx.xxxx.xxxx

policy-map MACDENIED

class MACBLOCKED

drop

interface x/x

service-policy input MACDENIED

Please rate helpful post.

Hope this helps

-Randy -