RE: MAC Address ACL's

2000-08-04 Thread David Jones

Without playing with a router, I think you could probably do like a
route-map statement that uses an access list, i.e. if packet = this, set
next hop to here.  HTH

Dave

-Original Message-
From: Ed [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 03, 2000 7:01 PM
To: [EMAIL PROTECTED]
Subject: Re: MAC Address ACL's


I actually just found that ACL's 700 - 799 are used for MAC's.
Does anyone have any idea on forcing the destination address
for a denied client?  What we're trying to do is pop a web page
for denied clients.

Sorry for the waste of the first message.
Thanx in advance!

--Ed
""Ed"" <[EMAIL PROTECTED]> wrote in message
8mcsm5$1ra$[EMAIL PROTECTED]">news:8mcsm5$1ra$[EMAIL PROTECTED]...
> I've been told by a trusted friend that it's possible to filter on the MAC
> address and if it's denied, to proxy the denied box to a specific web
sight.
>
> I've been looking through CCO but not having much luck.
> Anyone else have some thoughts?
>
> --Ed
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: MAC Address ACL's

2000-08-03 Thread Lawrence Dwyer


I am not sure, but you seem to be mixing layer 2, 3, and 4. Filter on a MAC
addy, to a different IP for web traffic. If you knew the source IP, then you
might be able to do some sort of route map. Match IP goes through NAT with one
IP on inside, no match goes through as different IP inside (choose which match
or no match would be the www denied server).

Think it would be easier to just filter the IP addresses on the webserver and
give them a denied page.


Ed wrote:

> I actually just found that ACL's 700 - 799 are used for MAC's.
> Does anyone have any idea on forcing the destination address
> for a denied client?  What we're trying to do is pop a web page
> for denied clients.
>
> Sorry for the waste of the first message.
> Thanx in advance!
>
> --Ed
> ""Ed"" <[EMAIL PROTECTED]> wrote in message
> 8mcsm5$1ra$[EMAIL PROTECTED]">news:8mcsm5$1ra$[EMAIL PROTECTED]...
> > I've been told by a trusted friend that it's possible to filter on the MAC
> > address and if it's denied, to proxy the denied box to a specific web
> sight.
> >
> > I've been looking through CCO but not having much luck.
> > Anyone else have some thoughts?
> >
> > --Ed
> >
> >
> > ___
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > ---
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: MAC Address ACL's

2000-08-03 Thread Ed

I actually just found that ACL's 700 - 799 are used for MAC's.
Does anyone have any idea on forcing the destination address
for a denied client?  What we're trying to do is pop a web page
for denied clients.

Sorry for the waste of the first message.
Thanx in advance!

--Ed
""Ed"" <[EMAIL PROTECTED]> wrote in message
8mcsm5$1ra$[EMAIL PROTECTED]">news:8mcsm5$1ra$[EMAIL PROTECTED]...
> I've been told by a trusted friend that it's possible to filter on the MAC
> address and if it's denied, to proxy the denied box to a specific web
sight.
>
> I've been looking through CCO but not having much luck.
> Anyone else have some thoughts?
>
> --Ed
>
>
> ___
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> ---


___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]