You can block it with MQC. Just match on that mac address then give him
zero bw, like the nimda fix you could do on Cisco routers.
Look up MQC and nimda.
Brian Dennis wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
If memory serves me correct, on a router, the MAC address
Hi,
Is it possible to block a MAC address on an interface by accesslist
or.??
I have this annoying customer playing around with their IP adresses and
bringing down the whole network
Charles
Message Posted at:
absolutely. you want something in either the 700-799 range or 1100-1199
range. see router output below:I've never actually implemented one of these
in real or lab. the choices seem to be permit or deny. There does not appear
to be a lot of flexibility here, as with an IP access list.
If memory serves me correct, on a router, the MAC address access-list will
not work for a protocol if you're routing that protocol. It's used for
bridged traffic. If you're routing IP and need to filter based on a MAC
address you might try looking into using a BVI.
Another easier solution
Correct me if I'm wrong, but I seem to remember that MAC-
address access lists only work on bridged interfaces. Is that
the case? I seem to remember reading that somewhere. I'll
have to double check.
John
Get your own 800 number
Voicemail,
5 matches
Mail list logo