MAC address filtering on Cisco C1111-8p

[shuliakdv]

Hello,
I have a cisco c1111-8p.

I want to add a rule like the ACL to block multiple hosts by MAC address.

How can I do that?

[sofiane7704]

That should work :

As an example :

(config)#mac access-list extended macext5
(config-ext-macl)#deny  any host 0000.0000.0009
(config-ext-macl)#deny any host 0000.0000.0010
(config-ext-macl)#permit any host 0000.0000.0011
(config-ext-macl)#permit any host 0000.0000.0012

for more info, check the following link:  
#https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/xe-3s/asr903/sec-data-acl-xe-3s-asr903-book/mac-access-control-lists.htm

[shuliakdv]

I created a mac access-list, but how do I apply it to an interface or policy or something else?

[sofiane7704]

it should be something like this :

Device(config)# interface gigabitethernet3/0/1

Device(config-if)#  access-group whatever in