I couldnt get VLAN filtering to work with MAC addresses, but I could get it
to work with IP addresses.
I double and triple checked the MAC#s against the ARP tables, and changed
the router MAC addresses so that they would be easier to read.
I have a WS-C3750-24PS-S running c3750-advipservicesk9-mz.122-25.SEE.bin.
The image is supposed to support VLAN filtering. I find it hard to believe
that my hardware would not support VLAN filtering by MAC#.
Relevant lines of configuration are below:
mac access-list extended allow_r2
permit host 0000.0000.0002 any
mac access-list extended allow_r4
permit host 0000.0000.0004 any
mac access-list extended allow_sw1
permit host 0011.bb97.bdc0 any
mac access-list extended test_all
permit any any
vlan access-map carol 10
action forward
match mac address allow_r2
vlan access-map carol 20
action forward
match mac address allow_r4
vlan access-map carol 30
action forward
match mac address allow_sw1
vlan access-map carol 40
action drop
vlan filter carol vlan-list 1