MAC Filetering

[midgar31]

how i can filter mac address in a ethernet interface, permiting only one mac address and deny any other, thanks in advanced

[t.baranski]

For switches, use the 'port security' feature. With routers it gets harder because they don't support port security and MAC access lists don't apply to IP traffic. Here you're stuck with a combination of static ARPs and IP access lists.

[dnagarajachary]

You can use access-list to block or permit the specified mac addresses using the range 700 to 799 for standard and 1100 to 1199 for extended mac address access lists as any other ip access lists

-Deepu

[t.baranski]

But these MAC access lists only apply to non-IP traffic, right? Or has this changed recently?