Configure Cisco Router 800 series to filter out certain mac addresses

How do you configure a Cisco 831 or 851 router to filter  out (deny) packets from specific mac address ranges?  Specifically, if I wanted to deny any packets from internal to external from any device without a 12 34 56 MAC address prefix, how do I configure that?  If these two models do not support this, can you recommend a model that does?
Who is Participating?
Do you have a router now ?

If so, then why not try out there ?, in the config mode just do 'access-list' and see if it has mac-acl as an option.


There isnt a mac-address acl available on the 831's, as far as i can see on mine.
If your trying to deny these specific mac addresses, whatever they are, i would suggest putting them in their own ip range, or a continuous range within your ip schema, then deny the range.

use access-list and not ip access-list (see below)

ROM: System Bootstrap, Version 12.2(8r)YN, RELEASE SOFTWARE (fc1)
ROM: C831 Software (C831-K9O3SY6-M), Version 12.2(13)ZG, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)

Internet.Router(config)#access-list ?
  <1-99>            IP standard access list
  <100-199>         IP extended access list
  <1100-1199>       Extended 48-bit MAC address access list
  <1300-1999>       IP standard access list (expanded range)
  <200-299>         Protocol type-code access list
  <2000-2699>       IP extended access list (expanded range)
  <700-799>         48-bit MAC address access list
  dynamic-extended  Extend the dynamic ACL abolute timer
  rate-limit        Simple rate-limit specific access list

sorry southpawjoe, Jim is correct. Thanks for the info Jim.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.