Bloc a specific mac on all port of a switch

[Fabr1c3]

Hello,

Is it possible to block a specific mac address on all port of a switch? How can I do that?

Thx.

[silvio]

there are some possibilities. A vlan rule will be the easiest way. You have to make all the accessports as mobile (not the uplink to other switches)
and put via rule this mac to specific vlan without connect to any other switch.

Code: Select all

vlan 99 name quarantine
vlan port mobile 1/1-48
vlan 99 mac xx:xx...

[capitanGiaco]

hi
is it possible to do it on AOS 8.x ?
thanks

[silvio]

Yes - but not so easy. Search (or look in network/cli guide) for accessguardian with mac-classification.
regards
Silvio