12-02-2002 03:15 AM - edited 03-02-2019 03:17 AM
my router 2621 was used as a nat function router, it's resource was occupied by a host who's MAC address was 0005.E345.A3B2 , the "show proccess cpu" is nearly 100%, so I have to do something to save the network. I want to restrict this host from connected with my router useing following command.
(
int f0/1
ip access-group 777 in
access-list 777 deny 0005.E345.A3B2 0000.0000.0000
access-list 777 permit 0000.0000.0000 1111.1111.1111
)
but I find the command "ip access-group " only accept from 1-199 and 1300-2699. so this access-list 777 couldn't be assigned to this interface at all. so how can I restrict this host with his MAC?
12-02-2002 06:32 AM
From a posting in another forum there was this URL:
It seems to me that this is what you were looking for as well
With regards to mr dafrancis
12-02-2002 06:49 PM
Thks, i will check it .
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: