×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Block mac-address

Unanswered Question
Aug 1st, 2012
User Badges:

Hello,



I have my lan with a core swicth 3750



one port of the 3750 is connected to an ASA5510 and this ASA is connected to internet.


I want to deny internet acces of a particular PC on lan.

I want to do that based on mac-address.


here the actual config of the port of the 3750 :



interface GigabitEthernet3/0/9

description toASA5510

no switchport

ip address 192.168.96.18 255.255.255.248

srr-queue bandwidth share 10 10 60 20

srr-queue bandwidth shape  10  0  0  0

queue-set 2

mls qos trust cos

auto qos voip trust

!



why deny by "mac access-group" is not possible on this interface .. ?


I can do it also on ASA in place of 3750, but don't find how ...



Thx

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

Actions

This Discussion