Hi Young,
the blocking from mac-adresses is possible. It depends from your softwareversion. On a IOS Switch you can use this:
Configuring MAC Address-Based Traffic Blocking
To block all traffic to or from a MAC address in a specified VLAN, perform this task:
Command
Purpose
Router(config)# mac-address-table static mac_address vlan vlan_ID drop
Blocks all traffic to or from the configured MAC address in the specified VLAN.
Router(config)# no mac-address-table static mac_address vlan vlan_ID
Clears MAC address-based blocking.
This example shows how to block all traffic to or from MAC address 0050.3e8d.6400 in VLAN 12:
Router# configure terminal
Router(config)# mac-address-table static 0050.3e8d.6400 vlan 12 drop
URL: http://www.cisco.com/en/US/partner/products/hw/switches/ps708/products_configuration_guide_chapter09186a0080160a59.html#wp1074871
On a CatOS switch you should use this:
This example shows how to create a filter that restricts traffic for a specific MAC address:
Console> (enable) set cam static filter 00-02-03-04-05-06 1
Filter entry added to CAM table.
Console> (enable)
URL http://www.cisco.com/en/US/partner/products/hw/switches/ps708/products_configuration_guide_chapter09186a008007f986.html
Regards
Peter
