Allow only known MAC Addresses

[tiredes2015]

Hello,

I have a Nexus 5K as core,

How i can use my MAC Address Table list to create a MAC ACl that allows these MACs and block the rest?

After doing this all new MACs should not be able to access the core switch, and i should be able to add and remove MACs from the allow list.

Thx

[Spooster IT Services]

Hi tiredes2015,

Instead of using MAC ACL as they are hard to manage you can use port security to allow/deny access based on MAC addresses. 

Following is the link having information related to enabling/disabling port security on 5K.

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/security/513_n1_1/b_Cisco_n5k_security_config_gd_513_n1_1/b_Cisco_n5k_security_config_gd_513_n1_1_chapter_01001.html

[tiredes2015]

the problem is that i need to block MACs that are not directly conected to the 5K, 

the 5K is the gateway of all my Vlans, and there is many switches conected to it, 

I need to protect free network points (meeting rooms etc..) if anyone with personal notebook conect using any of these points, with no MAC allowed, he can go nowhere.

is this possible?