Hi,  you can use Class-map, Policy-map and then apply it to the designated port. see example below class-map match any unwanted-pc's match source-address mac aaaa.bbbb.cccc match source-address mac nnnn.jjjj.dddd match source-address mac oooo.llll.pppp ! policy-map block class unwanted-pc's drop ! int gi 0/1 <--------------------- designated port which the PC is connected description "LAN Interface" service-policy input block   Regrads ... View more

Buenas tardes. Me pidieron una conexión site to site con una empresa y la hice con Cisco Meraki Mx84. Se me pidio traer el trafico de otras sucursales y por cuestiones de direccionamiento fue necesario poner un RV042 para recibir trafico VPN y hacer un tunnel.   La idea es que el RV042 reciba el trafico de las sucursales externas mediate site to site y el RV042 lo ingrese a mi LAN. Hasta aqui vamos bien.   El problema surge cuando desde las sucursales externas  intento llegar a la empresa que me pidio crear la VPN.   Asi es el camino de los paquetes.   La conexion site to site de mi RV042 ya esta con el router de una de las sucursales y puedo ver las maquinas de la LAN de mi WAN.     Sucursal 2 Meraki MX64 (LAN 10.5.2.0/24) ---> site to site ---> Sucursal1 RV042 (192.168.200.0/24) (Puerto WAN2 10.4.2.52 con un nateo a una IP Publica) ---->Meraki MX84 10.4.2.0/24 --> site to site --> tercer empresa (192.168.100.0/24).   Hasta mi  red LAN todo funciona bien, pero no logro llegar a la 192.168.100.0/24 que es la empresa que nos presta algunos servicios por medio de VPN y solo me recibe trafico proveniente de la LAN 10.4.2.0/24.   No se si me hice explicar pero espero me puedan ayudar.   Good afternoon. They asked me for a site to site connection with a company and I did it with Cisco Meraki Mx84. I was asked to bring traffic from other branches and for addressing issues it was necessary to put an RV042 to receive VPN traffic and make a tunnel. The idea is that the RV042 receives the traffic from the external branches mediate site to site and the RV042 enters it to my LAN. So far we go well. The problem arises when from the external branches I try to reach the company that asked me to create the VPN. This is the way of packages. The site to site connection of my RV042 is already with the router of one of the branches and I can see the machines of the LAN of my WAN. Up to my LAN everything works fine, but I can not get to 192.168.100.0/24 which is the company that provides us some services through VPN and only receives traffic from LAN 10.4.2.0/24. I do not know if I did explain but I hope you can help me. ... View more

Hi,   Cisco switches 3560 supports many types of ACLs (port ACL, Extended ACL and VLAN ACL which controls data bridged From and To same VLANs on the device). As far as I know, (sh ip access-list) command shows access lists that are configured manually in the device while (sh access-list) shows all access lists that the device needed to work. addition to that there is (sh ipv6 access-list) and (sh ipx access-list). Hope that could help     ... View more

Hi, Could you upload CME configuration, please? ... View more

Hi,   Zqdarma services not provisioning Cisco 7960,      they have online chat, you can check with them also.   Regards ... View more

What you mean by "run bash"? ... View more

Thanks ... View more