Differences between revisions 1 and 2
Revision 1 as of 2012-09-11 12:36:07
Size: 543
Editor: PieterSmit
Comment:
Revision 2 as of 2012-09-11 12:42:00
Size: 676
Editor: PieterSmit
Comment: Add some monitor commands.
Deletions are marked like this. Additions are marked like this.
Line 23: Line 23:
 * Monitor with
   * #clear mac address-table dynamic vlan 131
   * #show mac-address-table dynamic vlan 131 | i d0df.9ad2.ffd4

Mac access list on vlan interface

  • Goal to filter a specific mac on a vlan interface.

!
mac access-list extended MacWifiGuestBlock
 permit host d0df.9ad2.ffd4 any
 permit any host d0df.9ad2.ffd4
!
!
vlan access-map vAclWifiGuest 10
 action drop
 match mac address MacWifiGuestBlock
vlan access-map vAclWifiGuest 20
 action forward
!         
vlan filter vAclWifiGuest vlan-list 131
!
  • Monitor with
    • #clear mac address-table dynamic vlan 131
    • #show mac-address-table dynamic vlan 131 | i d0df.9ad2.ffd4

...


CategoryCisco

cisco/AccessListVlanMac (last edited 2012-09-11 15:04:26 by PieterSmit)