cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
549
Views
0
Helpful
1
Replies

mac filtering

sansari
Level 1
Level 1

Greetings

I am trying to do mac filtering on 3750, and here is the config I have...

!

mac access-list extended ARP_Packet

permit host mac1 any 0x806 0x0

permit host mac2 any 0x806 0x0

permit host mac3 any 0x806 0x0

permit any mac1 0x806 0x0

permit any mac2 0x806 0x0

permit any mac3 0x806 0x0

spanning-tree mode pvst

spanning-tree extend system-id

!

!

vlan access-map block_arp 10

match mac address ARP_Packet

action forward

vlan access-map block_arp 20

action drop

!

When I apply the command vlan filter block_arp vlan-list all, I lose connectivity to the hosts that are supposed to have connectivity and I have put in my access-list. My goal is to only allow the hosts that I previously know the MAC address for. What seems to be the problem with my config?

1 Reply 1

dominic.caron
Level 5
Level 5

You are only forwarding ARP packet in your ACL.

Review Cisco Networking products for a $25 gift card