cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
160
Views
0
Helpful
2
Replies
Highlighted
Beginner

how to restrict a host when know about his MAC address?

my router 2621 was used as a nat function router, it's resource was occupied by a host who's MAC address was 0005.E345.A3B2 , the "show proccess cpu" is nearly 100%, so I have to do something to save the network. I want to restrict this host from connected with my router useing following command.

(

int f0/1

ip access-group 777 in

access-list 777 deny 0005.E345.A3B2 0000.0000.0000

access-list 777 permit 0000.0000.0000 1111.1111.1111

)

but I find the command "ip access-group " only accept from 1-199 and 1300-2699. so this access-list 777 couldn't be assigned to this interface at all. so how can I restrict this host with his MAC?

2 REPLIES 2
Highlighted
Engager

From a posting in another forum there was this URL:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/ibm_c/bcprt1/bctb.htm#xtocid1230340

It seems to me that this is what you were looking for as well

With regards to mr dafrancis

Highlighted

Thks, i will check it .

Content for Community-Ad