Cisco Switch MAC address restriction

hopefully this is an easy question. I have a cisco 3550 switch. I want to LOCKOUT a user by his mac address. I want to make it so that no matter what port he plugs into, it locks him out.

I have seen how to set a port or range of ports to use the first mac address plugged into them. I do not see where I can add a mac-address and tell the switch to lock it out of every port.

I have a user that is constantly coming into the building after hours and getting on the net. I want to stop him at the source! I block his MAC address and he's dead in the water!

I want to do this on the switch. I don't want to add any 3rd party software to a server and have it authenticate all switch users.
Any ideas?

Switches / Hubs

Last Comment

icepick94

8/22/2022 - Mon

ASKER CERTIFIED SOLUTION

donmanrobb

2/27/2009

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

GET A PERSONALIZED SOLUTION

Ask your own question & get feedback from real experts

Find out why thousands trust the EE community with their toughest problems.

Don Johnston

2/27/2009

donmanrobb:

I have done this with a MAC access map, but if it's anything like an IP access-map then the config would be:

mac access-list extended blockguy
 permit host xxxx.xxxx.xxxx any
vlan access-map badguy 10
 match mac address blockguy
 action drop
vlan access-map badguy 20
 action forward
vlan filter badguy vlan-list <vlan(s)>

Open in new window

donmanrobb

2/27/2009

Right you are, I forgot the host keyword, thats what I get for typing things from memory :)

donmanrobb

3/1/2009

Any update icepick94?

All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat

William Peck

icepick94

3/3/2009

ASKER

Thanks a bunch!!