block access based on Mac Address

[Junaid Shah]

we need to block access to some of our end user equipment(modems) when they are late on their payment.
-redirect internet traffic of these modems to webpage that let them know invoice is due.
restrictions should done by mac address.
switch is 3750x

[paul driver · Accepted solution]

Hello

Not so sure about the redirect option but you can block on web site access utilising Nbar

to match on spefic addressing  and protocol of http url

class-map match-all STAN-cm
match access-group 100
match protocol http url "*.*"

policy-map STAN_pm
class STAN-cm
drop

int x/x
service-policy input STAN_pm

res
Paul

[Mark Malone · Accepted solution]

another option is macls

https://www.cisco.com/c/en/us/support/docs/switches/catalyst-3550-series-switches/64844-mac-acl-block-arp.html

[Junaid Shah]

Thank you Paul and Mark, this is helpful.