-4

May be a simple answer, but does anyone have an example of an ACL that would prevent certain users (preferably based on MAC address, so that I can not have to deal with static DHCP addressing) from accessing certain devices on the network?

Example: iPad with MAC AA:AA:AA:AA:AA:AA (DHCP assigned address of 10.10.10.54/24 - subject to change)

Need to block access to 10.10.10.5/24

10.10.10.1 is the gateway.

Improve this question
1
  • If you dont thrust them why you let them connect in your lan ?
    – yagmoth555 ♦
    Feb 3, 2015 at 2:37

2 Answers 2

Reset to default
3

Devices in the same subnet don't need router to access each other. Learn networking basics.

Improve this answer
1
  • I have many years of corporate and ISP networking, you are correct, it has been a long couple of weeks (not related to this), and my brain just wasn't thinking this through.
    – wb6vpm
    Feb 4, 2015 at 4:05
1

On a Cisco Route with IOS 12.2 or higher:

access-list 700 deny 0800.2000.0000 0000.00FF.FFFF

See the Cisco documentation for access-list(standard-ibm).

Improve this answer
6
  • 1
    If you're going to make copypasta answers, you could at least try and format them is a sane fashion.
    – EEAA
    Feb 3, 2015 at 2:49
  • relax, the post got messed up.
    – Citizen
    Feb 3, 2015 at 3:06
  • ...and you're also posting copyrighted material.
    – EEAA
    Feb 3, 2015 at 3:07
  • Which is why I cited it.....
    – Citizen
    Feb 3, 2015 at 3:07
  • It's greatly preferred that you write your own answer, and link to supporting documentation. Simply pasting large blocks of text with the formatting lost isn't very helpful and can be confusing.
    – Michael Hampton
    Feb 3, 2015 at 3:11

Not the answer you're looking for? Browse other questions tagged .