about mac and ip bundle on pix

[chunleihua]

how can i bundle the mac and ip on pix? in my customer's network , most of the end user's ip address are not permitted to access internet , but others address have right . So many of them often change their ip address to authorizable address . I want to deny the traffic by their mac address. just want to know if there is a solution to reslove it ?

[Fernando_Meza]

Hi .. you can statically map Ips to MAC using the arp command ..i.e

arp inside 192.168.0.42 00e0.1e4e.2a7c

However, I don't believe you can restrict access based on MAC addresses on the PIX .. you could perhaps implement a proxy server which allows connections based on user's groups.

I hope it helps ... please rate it if it does !!