Block Mac Address

[Handian]

Hi..

Can we block some mac address from wired connection?

[Leo Laohoo]

Yes

[Handian]

How we can block it?

[Leo Laohoo]

Depends where you want to block it:  DHCP, router, switch, etc.

A lot of vendors now have "MAC randomization" enabled by default.  So MAC address blocking may not work.

[Handian]

Just we ignore about 'mac randomization', can we block from core switch? So wherever the mac connect come from any switch, this mac addr will be blocked from accessing any resources.

[Leo Laohoo · Accepted solution]

Yes, of course.

[MHM Cisco World · Accepted solution]

Use mac acl and apply it to vlan.

[MHM Cisco World]

https://ine.com/blog/an-introduction-to-mac-access-lists