mac access-list

From: Jack Tsai (jacknew2005@gmail.com)
Date: Mon Jul 21 2008 - 16:24:44 ART

Next message: Luan Nguyen: "OT: How long does it take to get a Secret Clearance?"
Previous message: Andrew Shin: "For those who haven't seen this: "Rogue" network admin"
Next in thread: Scott Strobeck: "Re: mac access-list"
Maybe reply: Scott Strobeck: "Re: mac access-list"
Maybe reply: Sadiq Yakasai: "Re: mac access-list"
Maybe reply: Ramy Sisy: "RE: mac access-list"
Maybe reply: Jack Tsai: "Re: mac access-list"
Maybe reply: Paul Cosgrove: "Re: mac access-list"
Maybe reply: But Nicky: "Re: mac access-list"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Task: block the entire subnet 10.1.1.0/24 except one host in the subnet
with MAC: 1111.1111.1111
Is the following configuration all right?

(config)#mac access-list extended abc
(config-ext-macl)#permit host 1111.1111.1111 any

(config)#vlan access-map test 10
(config-access-map)#match mac address abc
(config-access-map)#action forward
(config)#vlan access-map test 20
(config-access-map)#match ip address 5
(config-access-map)#action drop
(config)#vlan access-map test 30
(config-access-map)#action forward

(config)#access-list 5 permit 10.1.1.0 0.0.0.255

Thanks,
Jack

Next message: Luan Nguyen: "OT: How long does it take to get a Secret Clearance?"
Previous message: Andrew Shin: "For those who haven't seen this: "Rogue" network admin"
Next in thread: Scott Strobeck: "Re: mac access-list"
Maybe reply: Scott Strobeck: "Re: mac access-list"
Maybe reply: Sadiq Yakasai: "Re: mac access-list"
Maybe reply: Ramy Sisy: "RE: mac access-list"
Maybe reply: Jack Tsai: "Re: mac access-list"
Maybe reply: Paul Cosgrove: "Re: mac access-list"
Maybe reply: But Nicky: "Re: mac access-list"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Mon Aug 04 2008 - 06:11:56 ART