Denying MAC and IPs on same interface

[Damir Reic]

Hi,

i have a C1921 router and i would like to have ACL that dines some IPs and some MACs on internal interface. Is that possible to do? I know that you can have only 1 ACL per interface and that probably you can't combine MAC and Ip addresses in one ACL so just wanted to confirm that is not possible.

Maybe some other way to do what i want?

[rvarelac · Accepted solution]

Hi damir2405

If you want to block a MAC address on a Cisco router please follow the next procedure:

class-map MACBLOCKED

match source-address mac xxxx.xxxx.xxxx

policy-map MACDENIED

class MACBLOCKED

drop

interface x/x

service-policy input MACDENIED

Please rate helpful post.

Hope this helps

-Randy -