Re: MAC Address Filtering!

From: Alexei Monastyrnyi (alexeim@orcsoftware.com)
Date: Wed Nov 15 2006 - 05:40:53 ART


yes... other VLAN 5 guys won't reach this router either

Mohammad Saeed wrote:
> If task says that MAC Address 0030.1369.87a0 shall not be allowed to
> communicate with Port 7 and 8 of switch, and both ports are in VLAN5,
> here is my solution,
>
> mac access-list extended DENY_ROUTER
> permit host 0030.1369.87a0 any
> exit
> vlan access-map DENY_R 10
> action drop
> match mac address DENY_ROUTER
> vlan access-map DENY_R 20
> action forward
> vlan filter DENY_R vlan-list 5
>
> Does any one see any problem in this?
>
> Regards,
>
> Mohammad Zahid Saeed
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Fri Dec 01 2006 - 08:05:47 ART