I couldn’t get VLAN filtering to work with MAC addresses, but I could get it to work with IP addresses.

I double and triple checked the MAC#s against the ARP tables, and changed the router MAC addresses so that they would be easier to read.

I have a WS-C3750-24PS-S running c3750-advipservicesk9-mz.122-25.SEE.bin. The image is supposed to support VLAN filtering. I find it hard to believe that my hardware would not support VLAN filtering by MAC#.

Relevant lines of configuration are below:


mac access-list extended allow_r2
permit host 0000.0000.0002 any
mac access-list extended allow_r4
permit host 0000.0000.0004 any
mac access-list extended allow_sw1
permit host 0011.bb97.bdc0 any
mac access-list extended test_all

permit any any
vlan access-map carol 10
action forward
match mac address allow_r2
vlan access-map carol 20
action forward
match mac address allow_r4
vlan access-map carol 30
action forward
match mac address allow_sw1
vlan access-map carol 40
action drop


vlan filter carol vlan-list 1


Reply via email to