topic How to block a particular Mac-Address of pc to get into network in Network Security https://community.cisco.com/t5/network-security/how-to-block-a-particular-mac-address-of-pc-to-get-into-network/m-p/2232668#M920644 <HTML><HEAD></HEAD><BODY><P>User is connecting to a wired port on your network? If so it should be wired back to a switch, not your router.</P><P></P><P>On a Cisco Catalyst switch you can set it up with several security features - make user authenticate (802.1x) or restrict to only pre-defined MAC address (port-security).</P><P></P><P>How to setup these features and which are available depend on your switch model. For example 3560 setup steps for those features are covered here:</P><P></P><P><A href="http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_58_se/configuration/guide/sw8021x.html">802.1x</A></P><P><A class="active_link" href="http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_58_se/configuration/guide/swtrafc.html#wp1038501">port security</A></P><P></P><P>Most IOS-based Catalyst switches are quite similar.</P></BODY></HTML> Wed, 17 Jul 2013 14:47:12 GMT Marvin Rhoads 2013-07-17T14:47:12Z How to block a particular Mac-Address of pc to get into network https://community.cisco.com/t5/network-security/how-to-block-a-particular-mac-address-of-pc-to-get-into-network/m-p/2232667#M920641 <P>Hello ,</P><P></P><P>There are many personal pc's which i dont want to be in company's network. I have tried to stop them via their mac-address by putting access-list command but it didnt work. Can you guys plz help me out which this thing. I am using cisco 2900 series router. Its a user personal pc so he statically add ip in it. Whenever he puts any ip in his pc it shouldnt get any ip from the network. Is it possible?</P> Fri, 21 Feb 2020 12:55:34 GMT https://community.cisco.com/t5/network-security/how-to-block-a-particular-mac-address-of-pc-to-get-into-network/m-p/2232667#M920641 abhishek18689 2020-02-21T12:55:34Z How to block a particular Mac-Address of pc to get into network https://community.cisco.com/t5/network-security/how-to-block-a-particular-mac-address-of-pc-to-get-into-network/m-p/2232668#M920644 <HTML><HEAD></HEAD><BODY><P>User is connecting to a wired port on your network? If so it should be wired back to a switch, not your router.</P><P></P><P>On a Cisco Catalyst switch you can set it up with several security features - make user authenticate (802.1x) or restrict to only pre-defined MAC address (port-security).</P><P></P><P>How to setup these features and which are available depend on your switch model. For example 3560 setup steps for those features are covered here:</P><P></P><P><A href="http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_58_se/configuration/guide/sw8021x.html">802.1x</A></P><P><A class="active_link" href="http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_58_se/configuration/guide/swtrafc.html#wp1038501">port security</A></P><P></P><P>Most IOS-based Catalyst switches are quite similar.</P></BODY></HTML> Wed, 17 Jul 2013 14:47:12 GMT https://community.cisco.com/t5/network-security/how-to-block-a-particular-mac-address-of-pc-to-get-into-network/m-p/2232668#M920644 Marvin Rhoads 2013-07-17T14:47:12Z How to block a particular Mac-Address of pc to get into network https://community.cisco.com/t5/network-security/how-to-block-a-particular-mac-address-of-pc-to-get-into-network/m-p/2232669#M920646 <HTML><HEAD></HEAD><BODY><P>Well Marvin, if i block the port then no other laptop can connect to that port. All other laptops are on sites which are located on very remote locations. Thats why i cannot configure port-security. Is there any possibility to block from router? I am using cisco 2900 series router. </P></BODY></HTML> Thu, 18 Jul 2013 06:00:48 GMT https://community.cisco.com/t5/network-security/how-to-block-a-particular-mac-address-of-pc-to-get-into-network/m-p/2232669#M920646 abhishek18689 2013-07-18T06:00:48Z How to block a particular Mac-Address of pc to get into network https://community.cisco.com/t5/network-security/how-to-block-a-particular-mac-address-of-pc-to-get-into-network/m-p/2232670#M920649 <HTML><HEAD></HEAD><BODY><P>A router cannot block a particular PC from connecting to a downstream switch using a static IP address.</P><P></P><P>Once you know the offending MAC address, port-security can block him. Requiring users to authenticate with 802.1x also works. Either method allows other authorized and/or authenticated users to connect.</P></BODY></HTML> Thu, 18 Jul 2013 13:39:18 GMT https://community.cisco.com/t5/network-security/how-to-block-a-particular-mac-address-of-pc-to-get-into-network/m-p/2232670#M920649 Marvin Rhoads 2013-07-18T13:39:18Z