How to block specific mac address on specific port to block communication

[asheesh.gupta11]

Hi All

i want to block a specific user mac address to use an specific port .

i configured acl

#mac access-list ext block_pc

(config-ext-macl)#deny host <mac of pc> any

then

at port 

#int gi<any port>

(conf port)#mac access-group block_pc

but its not working.

can you please help me to block the same.

[luis_cordova]

Hi @asheesh.gupta11 ,

Check this discussion:

https://community.cisco.com/t5/switching/how-to-block-single-mac-address-in-3550-switch/td-p/1849280

Regards

[balaji.bandi]

Other option you can do is sticky mac, so only trusted device will be connected.

[asheesh.gupta11]

Hi Balaji

i am already using radius by ISE server , but i want to block that mac only on a particular port not from all network

[Leo Laohoo]

---

@asheesh.gupta11 wrote:
In that case port will not be used by any device ,i want to block only a particular mac address.

---

This means that ANYONE has access to that port?

Block using MAC-based ACL.

[Leo Laohoo]

---

@asheesh.gupta11 wrote:

i want to block a specific user mac address to use an specific port .

---

1.  Shutdown the port; or

2.  Assign the port into VLAN 1.  

[asheesh.gupta11]

Hi Leo

In that case port will not be used by any device ,i want to block only a particular mac address.

[balaji.bandi]

how about doing as below to block the MAC for the VLAN X

 mac address-table static xxxx.xxxx.xxxx  vlan  Y drop   <<--- replace xxx.xxxx.xxxx and Y as per your requirement.

test advise.

[paul driver]

Hello

mac access-list extended nomac
deny host xxxx.xxxx.xxxx any
permit any any

int x/x
mac access-group nomac in