topic Re: Can PIX 515 support 'mac address' filtering in Network Security

Can PIX 515 support 'mac address' filtering

hancherk — Fri, 21 Feb 2020 06:31:43 GMT

Dear sir/madam,

Anybody know whether PIX 515 Firewall support 'mac address' filtering feature?

If i only want particular 'mac address' to access my server, can it be done?

Right now all SSH user can access my server by providing correct user name and password.

Re: Can PIX 515 support 'mac address' filtering

tvanginneken — Wed, 29 Jan 2003 11:17:03 GMT

Hi,

the PIX can not do MAC address filtering. Sorry...

Kind Regards,

Tom

Re: Can PIX 515 support 'mac address' filtering

hancherk — Thu, 30 Jan 2003 01:05:50 GMT

Hi Tom,

Thanks for reply, do you know any network equipment have this feature?

Re: Can PIX 515 support 'mac address' filtering

travis-dennis_2 — Thu, 30 Jan 2003 02:41:58 GMT

Going off memory I am pretty sure you can create a VLAN on a switch and filter by MAC, also a router put in bridge mode should be able to do that as well.

Re: Can PIX 515 support 'mac address' filtering

hancherk — Thu, 30 Jan 2003 03:03:56 GMT

Hi Dennis,

I have a Vlan on switch, will try this out first. Thanks a lot for the direction.

Re: Can PIX 515 support 'mac address' filtering

hancherk — Thu, 30 Jan 2003 04:12:35 GMT

HI Dennis,

Can I use VMPS feature to get what i want as it is for mac address filtering? Thank you.

Re: Can PIX 515 support 'mac address' filtering

travis-dennis_2 — Thu, 30 Jan 2003 04:46:43 GMT

Are you currently using VMPS? I'm a little fuzzy on it as I had to pull an all-nighter rebuilding a server last night but I think VMPS is more for creating VLANs dynamically based on MAC addresses and it seems you were looking more for a way to lock down a specific port on a switch that is static. VMPS can probably get your desired result but when I do this I go more for rules on the switch itself. Just my 2 cents

Re: Can PIX 515 support 'mac address' filtering

hancherk — Thu, 30 Jan 2003 05:06:45 GMT

Hi Dennis,

I think it can't work because I'm using Cisco Catalyst 2950 which VMPS is not supported.

I think probably we are facing 'hardware not compability' problem. Anyway, really thanks a lot for the directory and advise. Might see you some other time 🙂

Re: Can PIX 515 support 'mac address' filtering

dsingleterry — Thu, 30 Jan 2003 22:26:27 GMT

you can use VLAN's on the 2950 cant you?

Or were those the models that didnt support it. If you can you can definitely filter even down to each port you want the MAC addresses that can access that port.

Re: Can PIX 515 support 'mac address' filtering

hancherk — Thu, 06 Feb 2003 00:57:59 GMT

Hi Dennis,

I am sorry for late reply... i away these few days....

As i know VMPS only supported in Catalyst 5000 series or above...