Catalyst 2970 ACL

davidn2007 · ‎05-08-2008

I want to set up an ACL allowing only certain MAC addresses to be able to access the managment interface of the switch. I tried setting one up using the Cisco Network Assistant, but it did not work. I created an ACL with 2 rules. The first was to deny all MAC addresses access to the MAC address of the switch. The 2nd rule was to allow my MAC address to connect to the MAC address of the switch. I can still log into that switch from a different machine, so what am I doing wrong?

Chuckhull · ‎05-08-2008

The first line of your ACL rejects all MAC addresses, so it rejects yours. It never gets to the second line. You need to put your MAC address accept line first, then the reject all. ACLs read each line either acting on it or passing it down.