<div>
Thank you for your detailed explanation.<br />
<br />
I identified the MAC address of the offending IP by ARP cache. &nbsp;Moreover, I attempted to identify the MAC address by listing the address table on my Enterasys switching stack and there are no matching ones. &nbsp;It could be a wireless device, I suppose. &nbsp;<br />
<br />
I believe I'm going to attempt the ACL on the firewall.
</div>


Thank you for your detailed explanation.

I identified the MAC address of the offending IP by ARP cache.  Moreover, I attempted to identify the MAC address by listing the address table on my Enterasys switching stack and there are no matching ones.  It could be a wireless device, I suppose.  

I believe I'm going to attempt the ACL on the firewall.

<div>
Solarwinds Engineers toolset has a neat tool called switchport mapper. Download the free 30 day trial and run the application. It will compare the mac-address table with the arp cache of gateway router, use wins, netbios, dns lookups, use manufacturer table to tell you the brand of NIC. All of this together in a nice table for each port on the switch. It might help you.<br />
<a href="http://www.solarwinds.com" rel="ugc">http://www.solarwinds.com</a><br />

</div>


Solarwinds Engineers toolset has a neat tool called switchport mapper. Download the free 30 day trial and run the application. It will compare the mac-address table with the arp cache of gateway router, use wins, netbios, dns lookups, use manufacturer table to tell you the brand of NIC. All of this together in a nice table for each port on the switch. It might help you.
http://www.solarwinds.com [http://www.solarwinds.com]


<div>
<div class="content wysiwyg-content">
I'm trying to hunt down a device on my network with an IP address of 192.168.1.75, not showing up in DHCP leases. The method I want to use in finding out what it is / who it belongs to is to deny all traffic to it at the firewall level, in hopes someone will speak up. &nbsp;Is there a command that can do this?
</div>
</div>


I'm trying to hunt down a device on my network with an IP address of 192.168.1.75, not showing up in DHCP leases. The method I want to use in finding out what it is / who it belongs to is to deny all traffic to it at the firewall level, in hopes someone will speak up.  Is there a command that can do this?

How to deny TCP traffic by IP Address on ASA 5510

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).