Mac access list on vlan interface
- Goal to filter a specific mac on a vlan interface.
- I had to resort to adding a IP acl, it seems cisco switches only filter on mac if the packet is non ip.
!
mac access-list extended aclMacWifiGuestBlock
deny host d0df.9ad2.ffd4 any
deny any host d0df.9ad2.ffd4
permit any any
!
int Gi2/0/16
mac access-group aclMacWifiGuestBlock in
!
!
#sh access-lists aclMacWifiGuestBlock
!- Below did not work.
! mac access-list extended MacWifiGuestBlock permit host d0df.9ad2.ffd4 any permit any host d0df.9ad2.ffd4 ! ! vlan access-map vAclWifiGuest 10 action drop match mac address MacWifiGuestBlock vlan access-map vAclWifiGuest 20 action forward ! vlan filter vAclWifiGuest vlan-list 131 !
- Monitor with
- #clear mac address-table dynamic vlan 131
- #show mac-address-table dynamic vlan 131 | i d0df.9ad2.ffd4
...