cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
202
Views
0
Helpful
1
Replies

Denying MAC and IPs on same interface

Damir Reic
Level 1
Level 1

Hi,

 

i have a C1921 router and i would like to have ACL that dines some IPs and some MACs on internal interface. Is that possible to do? I know that you can have only 1 ACL per interface and that probably you can't combine MAC and Ip addresses in one ACL so just wanted to confirm that is not possible.

 

Maybe some other way to do what i want?

1 Accepted Solution

Accepted Solutions

rvarelac
Level 7
Level 7

Hi

If you want to block a MAC address on a Cisco router please follow the next procedure:

 

 

class-map MACBLOCKED

match source-address mac xxxx.xxxx.xxxx

policy-map MACDENIED

class MACBLOCKED

drop

 

interface x/x

service-policy input MACDENIED

 

Please rate helpful post.

Hope this helps

-Randy -

View solution in original post

1 Reply 1

rvarelac
Level 7
Level 7

Hi

If you want to block a MAC address on a Cisco router please follow the next procedure:

 

 

class-map MACBLOCKED

match source-address mac xxxx.xxxx.xxxx

policy-map MACDENIED

class MACBLOCKED

drop

 

interface x/x

service-policy input MACDENIED

 

Please rate helpful post.

Hope this helps

-Randy -

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: