MAC address

[ishwar]

I have cisco 3745 router. Is there any way to filter (access-list) using mac-address? I want to restrict restrict/allow internet use using mac-address.Please help me.

[pciaccio]

Extended access lists in the range of 700 - 799 are for MAC addresses. You can create an access list to just filter on MAC addresses....

[ishwar]

Thank

I will be thankful if you will tell me how to apply this access-list.Can you please give me example..?

[Roberto Salazar]

access-list based on mac-address will not work on IP traffic, it is used only for non-IP traffic. HTTP is an IP traffic, you have to use acess-list blocking on source IP. If you have no idea which ip address to block due to DHCP, then you can try using the DHCP server to bind a particular mac-address to the same ip address all the time and then you can block that IP address.

[devang_etcom]

hi bosalaza...

u mean to say when we want to stop perticular traffice on MAC base it will not possible so for that we have to statically map ip addresses to that MAC in DHCP and then we will have to block that maped ip ...right ???

regards

Devang

[Roberto Salazar]

you can't use a mac-address access-list for IP traffic.

[kevin.woodhouse]

Hi,

Are you trying to block a particular IP address or a range of addresses, why have you decided to look at MAC filtering. Can you elaborate on the setup you have got so we can gauge what kind of ACL you need and where to place the ACL. I agree that MAC may not be your best appraoach.