when you configure a bridge-group (to make a
2948-L3 more like a switch)
and try to allow only 1 mac address per port, using
the interface command,
2948-L3(Config-if)#bridge-group 10 input-address-list 701
(where 701 is a mac address access list), it does
not work.. the only way I have been able to do this,
is to apply to a software interface, like port-channel 1)
Can you apply these on a 2948-L3, (it of course works great on a router)..
What I need to do is port security (like a 3550)
on a 2948-L3, where only 1 IT dept approved mac
can get on any fastethernet port.
I apply the input-address-list and nothing is blocked.... Any mac can still transmit (security
does not work) Please help !
bridge irb
!
!
!
!
interface FastEthernet1
no ip address
no ip directed-broadcast
bridge-group 10
bridge-group 10 input-address-list 701
bridge-group 10 spanning-disabled
!
access-list 701 permit 0001.e69f.3015 0000.0000.0000
access-list 701 deny 0000.0000.0000 ffff.ffff.ffff
!
!
interface BVI10
ip address 10.10.10.1 255.255.255.0
no ip directed-broadcast
!
!
bridge 10 protocol ieee
bridge 10 route ip
bridge 10 priority 60000
