09-04-2018 10:42 AM - edited 03-08-2019 04:04 PM
HI
i have a similar issue, i want to allow only certain mac addresses from Voice Vlan going any where using acl and drop the mac addresses that are not defined in the acl, Ive tried mac acl with vlan access map and vlan filter list but it just didnt work.????????
09-04-2018 11:00 AM
09-06-2018 06:19 AM
mac access-list extended TEST
permit any any
mac access-list extended TEST1
deny host 44ad.d9bd.71ad any
!
!
vlan access-map PHONES 10
action drop
match mac address TEST1
vlan access-map PHONES 20
action forward
!
vlan filter TEST vlan-list 556
nothing happens both phones ive got patched into the switch are still registered.???
09-04-2018 11:51 AM
Try example : ( change based on the version of IOS and command syntax).
mac access-list extended MAC_ACL1
permit host MAC-Address1 any -- MAC Address replace with actual MAC address
permit host MAC-Address2 any
permit host MAC-Address3 any
deny any any
interface GigabitEthernet1/0/8 ( change the interface as per your requirement)
mac access-group MAC_ACL1 in
09-04-2018 12:16 PM
Hi
How do I apply to voice vlan please.??
Thanks
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: