Hi,
i am trying to configure MAC Filtering for few PCs which should have access to internet and remaining all should be blocked.
we have a remote branch connected over dmvpn tunnel and internet traffic going out from remote gateway.
i have to block all users from accessing internet except few but allow all to access few servers over dmvpn tunnel.
interface FastEthernet4
ip address dhcp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface Vlan1
description "To LAN"
ip address 192.168.15.161 255.255.255.224
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
!
ip nat inside source list 2000 interface FastEthernet4 overload
ip route 48.96.27.138 255.255.255.255 192.168.1.1
!
!
access-list 2000 deny ip any 192.168.20.4 255.255.255.255
access-list 2000 deny ip any 192.168.20.30 255.255.255.255
access-list 2000 deny ip any 192.168.20.54 255.255.255.255
access-list 2000 permit ip any any
traffic for 3 servers going on dmvpn tunnel and the remaining traffic going out to internet.
i want to block all PC's access to internet except few and all users must access these 3 servers.
