How to block ONLY http port 8080 (proxy) data on a particular interface of cisco catalyst 2960 switch

[pushpender240]

Hi 

I want to know if there is a way to block only http port 8080 ( proxy) data at a particular interface level on a catalyst 2960 switch.. I.e i just want to block proxy data and allow all other data to pass through.

I would appreciate any help on this topic

Thanx

[Marvin Rhoads]

Please tell us which switch model and IOS version you have. You may be able to use 'ip device tracking' with an interface access list if your hardware and software support it ) even on a layer 2 switch)..

[pushpender240]

Hi Marvin

i have Model:  WS-C2960X-24TS-L, SW Version- 15.0(2)EX4,  SW Image- C2960X-UNIVERSALK9-M.

[Marvin Rhoads · Accepted solution]

OK.

You should be able to do ip device tracking on that platform since IOS 15.02(2)EX. Reference. 

Turn it on and verify you are getting the tables populated. i.e "show ip device tracking" - see this reference.

With a working ipdt setup, you can then apply a typical ip extended access-list on the physical interface.