Hello,
Is there a way to block a host from the inside using only there MAC address on a PIX 501?
Thank You
BLOCK A HOST FROM THE INSIDE
Oct 24, 2006
8 Replies
nope, no can do on MAC alone. What you can do tho is make a DHCP reservation for that MAC, bind an IP to it, then block that IP.
access-list inside_block deny ip host X.X.X.X any access-list inside_block permit ip any any access-group inside_block in interface inside
Can you please help me with the DHCP reservation for the MAC address. Also, can you help me with the binding of an IP?
Thank You
Brian V wrote:
You also have my favourite command, "shun"
What are you us> Can you please help me with the DHCP reservation for the MAC address.
Depends on what you are running for a DHCP server, thats where it's done.
I am using a Wireless Router from Belkin as the DHCP server. The wireless router is also running NAT.
Thanks
snipped-for-privacy@gmail.com wrote:
Don't know anything about Belkin, should be something in the manual if it's possible to do the binding. Should be under DHCP reservation.
Thanks a lot for all your help.
Victor
Brian V wrote:
May I ask the reason for especially blocking a specific host from inside? You are aware of the fact that a MAC address can be easily spoofed?
Michael
Join the Discussion
Have something to add? Share your thoughts — no account required.
Didn't find your answer?
Ask the community — no account required