Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Lock down port to one specific mac-address

Greetings.

I'm running a basic ASA 5505 with one outside interface and one inside interface (0/1). For security purposes, I'd like to lock down the inside 0/1 port to the mac address of the host that will be connecting to it. We don't want to run DHCP, so utilizing reservations that way won't be an option.

So if the Windows host that will be connecting to the ASA port 0/1 has a mac address of:

00:44:00:f0:21:cg

How would I tell the ASA to only allow that mac the ability to connect to port 0/1?

Thanks in advance!

2 REPLIES
Hall of Fame Super Blue

Re: Lock down port to one specific mac-address

If you run the ASA in transparent mode then you can block on mac-addresses but if you run in routed mode you cannot use mac-addresses in acls.

Jon

Community Member

Re: Lock down port to one specific mac-address

Create a static arp-entry and base your access-list on that ip only, denying everything else.

Or make your firewall transparent and filter on host mac-address.

1424
Views
0
Helpful
2
Replies
CreatePlease to create content