Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

mac address filtering doesn't work on c4506

Hi guys,

i configured mac address filtering and ip filtering on cisco catalyst 4506 like the configuration below, the ip filtering works fine but not mac filtering feature.

could someone help me for that ?

Regards.

Mustapha.

---

Switch(config)# mac access-list extended mac-device-list

Switch(config-ext-macl)# permit host 0000.0101.0011 any

Switch(config-ext-macl)# permit host 0000.0101.0012 any

Switch(config)# ip access-list extended ip-device-list

Switch(config-ext-nacl)# permit ip host 10.1.101.11 any

Switch(config-ext-nacl)# permit ip host 10.1.101.12 any

Switch(config)# interface fa0/1

Switch(config-if)# ip access-group ip-device-list in

Switch(config-if)# mac access-group mac-device-list in

2 REPLIES
Hall of Fame Super Silver

Re: mac address filtering doesn't work on c4506

Hello Mustapha,

is your interface fas0/1 currently configured as a routed port (no switchport + ip address)

In that case this behaviour can be explained.

Try the following

move L3 config to an SVI interface make fas0/1 an access link of the same l2 vlan

test again and tell if you see any change

Hope to help

Giuseppe

Community Member

Re: mac address filtering doesn't work on c4506

Hi giuseppe,

the port is configured as switchport access mode.

Regards.

Mustapha.

208
Views
0
Helpful
2
Replies
CreatePlease to create content