MAC ACL for telnet access

johartman · ‎03-26-2013

Does anybody know where I can find any examples/documentation of a MAC address based ACL to restrict telnet access to a router based on MAC addresses specified? I tried using the 700 range MAC access-list but it won't allow me to apply it the vty lines.

sgouldbo · ‎03-26-2013

Hello,

Unfortunately a MAC ACL can only be applied to a Layer 2 interface and it will only be able to filter Non-IP traffic.

Regards.

paul driver · ‎03-26-2013

Hello

Try control plane policing

Access-list 700 permit xxxx.xxxxx.xxxxx

Class-map match-all testcm
Match telnet
Match IP address 700

Policy-map testpm
Class testcm
Drop

Control-plane
Service-policy input testpm

Res
Paul

Sent from Cisco Technical Support iPad App

Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul