Block Mac address

[benolyndav]

HI

i have a similar issue, i want to allow only certain mac addresses from Voice Vlan  going any where using acl and drop the mac addresses that are not defined in the acl, Ive tried mac acl with vlan access map and vlan filter list but it just didnt work.????????

[rasmus.elmholt]

Hi MassB

Could you share the configuration you have that isn't working.

[benolyndav]

mac access-list extended TEST
 permit any any
mac access-list extended TEST1
 deny   host 44ad.d9bd.71ad any

!
!
vlan access-map PHONES 10
 action drop
 match mac address TEST1
vlan access-map PHONES 20
 action forward
!
vlan filter TEST vlan-list 556

nothing happens both phones ive got patched into the switch are still registered.???

[balaji.bandi]

Try example : ( change based on the version of IOS and command syntax).

mac access-list extended MAC_ACL1
permit host MAC-Address1 any   --  MAC Address replace with actual MAC address

permit host MAC-Address2 any

permit host MAC-Address3 any

deny any any

interface GigabitEthernet1/0/8  ( change the interface as per your requirement)

mac access-group MAC_ACL1 in

[benolyndav]

Hi

How do I apply to voice vlan please.??

Thanks