Re: [c-nsp] Blocking bad users based on MAC Address

2009-03-25 Thread Phil Mayers
Rick Coloccia wrote: oh, thank you, I see how direct and precise this is, and if I wanted to drop the person in several vlans, I assume I could do mac-address-table static 0016.6f99.9e61 vlan 3030 drop mac-address-table static 0016.6f99.9e61 vlan 3010 drop mac-address-table static

[c-nsp] Blocking bad users based on MAC Address

2009-03-24 Thread Rick Coloccia
Is anyone doing anything like this in a Catalyst 6500? I'm running a sup 720 with ios 12.2(33)SXH4. I have a bad user that I need to block, regardless of where or how they connect to the lan. I hoped that by blocking their mac address, where-ever it may appear, I might be able to accomplish

Re: [c-nsp] Blocking bad users based on MAC Address

2009-03-24 Thread schilling
You can just do mac-address-table static 0016.6f99.9e61 vlan 3030 drop. Schilling On Tue, Mar 24, 2009 at 3:42 PM, Rick Coloccia coloc...@geneseo.edu wrote: Is anyone doing anything like this in a Catalyst 6500?  I'm running a sup 720 with ios 12.2(33)SXH4. I have a bad user that I need to

Re: [c-nsp] Blocking bad users based on MAC Address

2009-03-24 Thread Rick Coloccia
oh, thank you, I see how direct and precise this is, and if I wanted to drop the person in several vlans, I assume I could do mac-address-table static 0016.6f99.9e61 vlan 3030 drop mac-address-table static 0016.6f99.9e61 vlan 3010 drop mac-address-table static 0016.6f99.9e61 vlan 3020 drop