MAC Filtering on Cisco 2960

[markmarvinq]

Dears,

I'm having issue on MAC filtering on cisco 2960 SW. Macbook laptop is not working in MAC filtering.

My setup is Wireless AP is connected to trunk port and AP is broadcasting 3 SSID(different vlans). I apply MAC filtering on trunk port but the issue is MAC book laptop even i did not permit MAC he can still able to access the NET.

interface FastEthernet0/1
description *** CONNECTE to ACCESS POINT **
switchport trunk native vlan 88
switchport mode trunk
switchport nonegotiate
mac access-group WIRELESS in

Second thing i need your help is i want to apply VACL on my cisco 2960 SW(WS-C2960+48PST-L) but seems like it doesn't support with my current IOS (Version 15.0(2)SE6    C2960-LANBASEK9-M). Please advise where i can get IOS that supports VACL.

Thanks in advance for your help.

[Borgenstrand]

Hi,
When I check out Cisco feature navigator( http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp ), it does not seem like your switch can handle VACL. Exactly which switch plus image do you use? According to feature navigator I can find CAT2960CX in the list, but not just 2960.
Is c2960-lanbasek9-mz.150-2.SE6.bin the image you use?

[markmarvinq]

yes image c2960-lanbasek9-mz.150-2.SE6.bin

Can we use diffent IOS that support VACL or private VLAN on 2960?

Which IOS version and where can we get ?

Appreciate your support

[Borgenstrand]

Hi,

I am sorry, but from what I can see from Cisco Feature Navigator you need a higher end switch. I do not think that VACL nor Private VLAN works in 2960. 

From:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/15-0_2_se/release/notes/OL25301.html

I can see that would need at-least a 3560 switch for Private-VLAN. 

[Carlos Villagran]

Hi!

Can you post the MAC ACL configuration?

Regards!

JC

[markmarvinq]

mac access-list extended WIRELESS
permit host xxxx.xxxx.xxxx any
permit host yyyy.yyyy.yyyy any
permit host zzzz.zzzz.zzzz any