MAC Filtering in Router

Unanswered Question
Dec 23rd, 2008

Router 1800 with ehternet connected to side Switch with four servers.Serial port connected to internet.Is it possible to allow traffic to servers with their MAC addresses than IP addresses.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
drienties Wed, 12/24/2008 - 03:54

I have never tested or used it but:

Access lists 700-799 should be standard MAC address acl'

Access lists 1100-1199 should be extended MAC address acl's.

so you would end up with something like:

access-list 700 permit aaaa.aaaa.aaaa

vannacisco Mon, 01/05/2009 - 20:49


I've been trying to apply the mac filtering,still failed.

I created access list 700 specifying my mac of my PC.When i tried to apply in ethernet interface,it says "% Invalid access list name."

My router is 1841.

i check some [email protected], it says Mac filtering can be applied to G.Bit port or Sub-interface!

My purpose is to block the pcs in the Lan to connect to internet.


victor_87 Tue, 01/06/2009 - 02:12

I think the MAC access-lists on routers have somwething to do with bridge-groups.

I have never tried but the think mac access-lists in routers can only be applied to interfaces configured into a bridge-group.

u can check the command

(config-if)#bridge-group input-address-list 700



vannacisco Tue, 01/06/2009 - 04:21

any way, Will it serve my purpose?

I need to block the traffic by Mac address level by all the devices in the LAN side?



This Discussion