Affordable device for MAC ACL

[Scott P123]

I currently have a Cisco 851 which I believe does not support MAC ACLs. Does anyone know another device that I can find used that will support them? I would like it to be a small form factor if possible.

Thank You

[Edison Ortiz]

2960X

[Scott P123]

Those do not seem to come in the smaller variations like the 800 series. They are also not affordable for a home network.

[Karsten Iwen · Accepted solution]

You could use the SG300-10. It's a switch with 10*1Gig interfaces which can also filter on Mac-Adresses:

http://www.cisco.com/cisco/web/solutions/small_business/products/routers_switches/300_series_switches/index.html

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Scott P123]

That is a great recommendation, but this is a budget project so I was hoping to find something a little older that I can pick up used on eBay. I only need 100Mbps links as well nothing in this network will exceed that. I will keep an eye out for the SG300.. Does the SF300-08 also do Mac address filtering ?

[Karsten Iwen]

Well the SG/SF300 are already "low-end" (at least for Cisco) ... ;-)

I only can confirm it for the SG300, but the Admin Guide is also for the FE-devices and there is nothing mentioned that they don't support it. So I would assume that it will also work on these devices.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Scott P123]

They are low end new. I am looking for low end used

[Leo Laohoo]

I've got a 890 and MAC-based ACL is supported.

Is this low-end for you?

According to the data sheet, 880 will support "MAC filtering", which is essentially MAC-based ACL.

And according to the 860 data sheet, this model does not support MAC-based ACL. 

[Karsten Iwen]

But the 880/890 are much more expensive then the SG300-10 (or the SF300-8 which sells for under $100.- on eBay).

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Leo Laohoo]

But the 880/890 are much more expensive then the SG300-10 (or the SF300-8 which sells for under $100.- on eBay).

LOL.

But the OP was talking about the 850 router.  I'm no expert in the SG-type, but is this a router?

[Karsten Iwen]

no, it's just a SmallBusiness Layer3-switch that could be placed in front of the 850 to do the filtering.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Leo Laohoo]

it's just a SmallBusiness Layer3-switch that could be placed in front of the 850 to do the filtering.

That'll do. 

[Scott P123]

Thank you both