MAC address filtering for a rang of MAC addresses

smetzger68 · ‎12-31-2008

I would like to Filter a MAC address range so only PC's from one manufacturer are allowed on a particular vlan (IBM) for instance. Is there a way to filter by MAC address range?

I am using the following switches

WS-C3750G-48PS-S

WS-C3750-48PS-S

with this IOS:c3750-ipservicesk9-mz.122-25.SEE4.bin

arohyans · ‎12-31-2008

Sounds like you need a VLAN Filter applied - you'll have to know the MACs of all the machines that you want to permit, or they will all need to be in a nice neat contiguous range, but this should get you started:

mac access-list extended IBM_MACS

permit host a001.b001.c001 any

permit host d002.e002.f002 any

!

vlan access-map PERMIT_IBM 10

action forward

match mac address IBM_MACS

vlan access-map PERMIT_IBM 20

action drop

!

vlan filter PERMIT_IBM vlan-list 1, 3-5, 8

HTH,

Aaron