Re: mac address access-lists

From: kym blair (kymblair@hotmail.com)
Date: Sat Feb 15 2003 - 19:34:19 GMT-3


Eric,

Would the following work?

mac access-list extended DROP050505
  permit 0505.0500.0000 0000.00FF.FFFF any

vlan access-map FILTER15 10
    match mac address DROP050505
    action drop
vlan access-map FILTER15 20
    action forward

vlan filter FILTER15 vlan-list 15

Kym

>From: eric <namaste@pacbell.net>
>Reply-To: eric <namaste@pacbell.net>
>To: Ccielab <ccielab@groupstudy.com>
>Subject: mac address access-lists
>Date: Sat, 15 Feb 2003 13:59:19 -0800
>
>Hey guys,
>Here is requirement, unfortunatley the answer confuses me more than helps.
>any input would be appreciated.
>
>"Configure cat1 to deny mac address whose first 3 bytes are 050505 to send
>any frames to any host on vlan 15 "
>
>Now the first part I can figure out its the second part that about sending
>frames to any host on a particular vlan thats got me.
>How is this done ?
>
>Regards,
>
>~eric



This archive was generated by hypermail 2.1.4 : Sat Mar 01 2003 - 11:06:24 GMT-3