Block internet traffic base on PC mac address for a particular time period..

[Cisco Kbsl]

Hi

I want to block internet traffic of a particular user base on his PC mac address.Is it possible with a ACL?

Actually the setup is like follows,

Is it possible to configure a ACL to Gig 2/0/1 by allowing all other users to internet traffic except a perticular person in first floor ?

Regards

Shashi

[Julio Carvajal]

Hello,

It can be done but not based on layer 2 mac address, the ACL will filter based on layer 3-4 information.

So if you have the IP address of that user you could create an ACL and go with that

Regards,

Julio Carvajal

[Kishore Chennupati]

Hi,

As julio suggested use the ip address and you can configure time based ACL's. Below is a cisco link for it

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml#timebasedtimerange

You can also look at this nice blog.

http://ardenpackeer.com/tutorials/security/tutorial-time-based-acls/

Regards, Kishore

[jawad-mukhtar]

Hi You can apply PBR like

ACL

permit ip 192.168.1.50

route-map

match ip address ACL

set next-hope (Internet Gateway Device)

Ony permit ips in acl will have internet access.

*** Do Rate Helpful Posts***