Catalyst 2970 ACL

Unanswered Question
May 8th, 2008

I want to set up an ACL allowing only certain MAC addresses to be able to access the managment interface of the switch. I tried setting one up using the Cisco Network Assistant, but it did not work. I created an ACL with 2 rules. The first was to deny all MAC addresses access to the MAC address of the switch. The 2nd rule was to allow my MAC address to connect to the MAC address of the switch. I can still log into that switch from a different machine, so what am I doing wrong?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Chuckhull Thu, 05/08/2008 - 08:08

The first line of your ACL rejects all MAC addresses, so it rejects yours. It never gets to the second line. You need to put your MAC address accept line first, then the reject all. ACLs read each line either acting on it or passing it down.


This Discussion