how to block dynamic mac address in cisco 9300 switchport tw1/0/2 ? do we have any command for this.

[agilent runprojects]

how to block dynamic mac address in cisco 9300 switchport tw1/0/2 ? do we have any command for this.

my scenario is to assign static mac address of 2 laptops which should use the internet but only those 2 laptops shoud work in those interfaces. for that, I have created a static mac address to those interfaces. 

but if I connect my laptop dynamic mac address is learning and it can connect to the internet. how to block dynamic mac address in a cisco switch port. 

[marce1000]

 - Have a look at the port security configuration examples from this document, it may  help you :

   https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-6/configuration_guide/sec/b_166_sec_9300_cg/configuring_port_based_traffic_control.html

 M.

[paul driver]

Hello

---

@agilent runprojects wrote:

how to block dynamic mac address in cisco 9300 switchport tw1/0/2 ? do we have any command for this.

my scenario is to assign static mac address of 2 laptops which should use the internet but only those 2 laptops shoud work in those interfaces. for that, I have created a static mac address to those interfaces. 

but if I connect my laptop dynamic mac address is learning and it can connect to the internet. how to block dynamic mac address in a cisco switch port. 

---

A basic mac acl-
mac access-list extened  static_hosts
permit host 0111.1111.1111 any vlan x
permit host 0111.1111.2.2.2.2 any vlan x
deny any any

int x/x
mac access-group static_hosts IN

[Martin L]

I wonder if port security would work here as well; instead of using MAC ACL