Hi,
if you want to do this on the router then you can do something like this:
class-map match-any PERMITTED_MACS
match source-address mac xxxx.xxxx.xxxx
match source-address mac xxxx.xxxx.xxxx
# add as many matches as paermitted MAC addresses
class-map DENIED_MACS
match not class-map PERMITTED_MACS
policy-map DENIED_MACS
class DENIED_MACS
drop
int x/x # inside address where client traffic enters the router to go out the Internet.
service-policy in DENIED_MACS
To verify: sh policy-map interface x/x
Regards.
Alain
Don't forget to rate helpful posts.
Don't forget to rate helpful posts.