cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

1725
Views
0
Helpful
2
Replies
bthompson001
Beginner

Lock down port to one specific mac-address

Greetings.

I'm running a basic ASA 5505 with one outside interface and one inside interface (0/1). For security purposes, I'd like to lock down the inside 0/1 port to the mac address of the host that will be connecting to it. We don't want to run DHCP, so utilizing reservations that way won't be an option.

So if the Windows host that will be connecting to the ASA port 0/1 has a mac address of:

00:44:00:f0:21:cg

How would I tell the ASA to only allow that mac the ability to connect to port 0/1?

Thanks in advance!

2 REPLIES 2
Jon Marshall
VIP Community Legend

If you run the ASA in transparent mode then you can block on mac-addresses but if you run in routed mode you cannot use mac-addresses in acls.

Jon

jilahbg
Beginner

Create a static arp-entry and base your access-list on that ip only, denying everything else.

Or make your firewall transparent and filter on host mac-address.

Create
Recognize Your Peers
Polls
Which of these topics should we host an event in the Community?

Top Choice: ISE- Guest and Posture Troubleshooting (40%)

Content for Community-Ad