Are you referring to adding the 'class default' to be added on the second class to be dropped?
If you run a very new IOS it's worth to test it with the class-default. At least on 15.0 the class-default doesn't support the drop-action.
Could you give a sample template to test it out? I miss joining the Firewall/VPN group discussion. Been away and really busy lately
untested, but I think the following policy-map should work:
class-map match-all TEST-ANY
class-map match-any TEST-MAC
match source-address mac AAAA.BBBB.CCCC
match source-address mac BBBB.CCCC.DDDD
match source-address mac CCCC.DDDD.EEEE
Just to confirm: Are the systems that you want to allow L2-adjacent to the router so that the router really sees the MAC-address of the PCs? If there is a L3-switch between, then it won't work. And always remember that this only implements a very weak security that can be easily circumvented by a skilled user (depending on the other security-measures you have in place).
This is actually a pretty cool feature, i didn't even know it existed until I was looking for a solution to advertise a subnet (prefix in BGP talk), only if a certain condition existed. This is exactly what conditional advertisements does
j ai une question j ai achete un routeur cisco 887VA-k9 , je le configuré avec la configuration ci- dessous
si je le lier avec mon pc portable sur l un de ses ports directement ça marche toute est bien ( la connexion internet + m...
Attached policy provides CLI access to the Cisco 4G router over text messaging. Two files are in the attached .tar file:
2. PDF with instructions on how to load and use the .tcl file.