PIX501: block non-authorised MAC-addresses

- I
- Iskander
  
  Contact options for registered users
posted
18 years ago

Tue, Oct 4, 2005 3:01 PM

Hi all,

I'm looking for a way to block all acces from non-authorised MAC-addresses, even to obtaining an IP-address from DHCPD on a PIX 501

Anyone have an idea on how to do that..??

- C
- Cen
  
  Contact options for registered users
Vote on answer
posted
18 years ago

Tue, Oct 4, 2005 3:52 PM

You might want to use a switch as access layer, which can do mac-address filtering, or 802.1x authentication

- W
- Walter Roberson
  
  Contact options for registered users
Vote on answer
posted
18 years ago

Tue, Oct 4, 2005 3:57 PM

In article , Iskander wrote: :I'm looking for a way to block all acces from non-authorised :MAC-addresses, even to obtaining an IP-address from DHCPD on a PIX 501

:Anyone have an idea on how to do that..??

You cannot do that on a PIX 501. The only MAC level control you have is with respect to VPN traffic, via the "mac-list" configuration commands.

PIX 7.0 might have more, but PIX 7.0 is not supported on the 501.