I have a setup where 3524s are used as access switch and intervlan routing is happening in 4908G-L3 switch. I have to restrict some users for internet access. I can do this by confiuring access lists. But if the users change the ip address to a valid one then they will be abl to access outside world. the customer wants to map the PC mac address to ip address. So that if the user changes the ip address he will not be able to access the network at all. Is there any feature in 3524 or 4908G-L3 switch to achieve this?
can you add another vlan to the network, and add those PCs that you try to block the internet access to this vlan, then block the vlan. Add another dhcp scope to the dhcp server, assign this scope to the vlan.
