Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

MAC address filtering on the PIX outside interface

Is it possible to set up MAC address filtering on the outside interface of a PIX device? I have an application that I only want company laptops to connect to via the Internet. Is there some information, perhaps a config that I could adapt?

3 REPLIES
Hall of Fame Super Blue

Re: MAC address filtering on the PIX outside interface

Not sure how this would work. Mac addresses are only relevant on the local LAN so the pix firewall would never see the source mac-address of the company laptops by the time the traffic gets to the pix.

If you are using a VPN on the laptops then yes you would see the mac-address but then with a VPN you could restrict it to only company laptops anyway.

Have i misunderstood what you are trying to do ?

Jon

Community Member

Re: MAC address filtering on the PIX outside interface

-John,

Yes, you are right. I will probably end up using a VPN client. Thanks for your input.

-Jay

Hall of Fame Super Blue

Re: MAC address filtering on the PIX outside interface

Jay

Just for info - if the application is web based you can use your firewall to authenticate the users before giving them access.

Jon

269
Views
0
Helpful
3
Replies
CreatePlease to create content