Control the access network of a known IP Address

MAC address-based ACL control ======= mac access-list extended MAC80185 deny host 00e0. 4c90. 01d1 any permit any! Www.2cto.com interface FastEthernet0/4 switchport access vlan 251 no ip address mac access-group MAC80185 in ================ =========================, method 2
Use SNIFFER to check the IP address of the faulty PC and the MAC address 0710-SCM4506-A # sh arp | in 172.27.2.120 Internet 172.27.2.120 1 0002. e348.aba1 ARPA Vlan2000710-SCM4506-A # conf tEnter configuration commands ,. e per line. end with CNTL/Z. run the following command to drop the faulty pc mac address and send the packet 0710-SCM4506-A (config) # mac-address-table static 0002. e348.aba1 vlan 200 dropNO drops the MAC address, and the PC can access www.2cto.com 0710-SCM4506-A (config) # no mac-address-table static 0002. e348.aba1 vlan 200 ======================================== ========================================================== showshow arp | in + ip find the MAC address, then show mac-address-table address MAC finds the corresponding switch port, 0710-SCM4506-A> show cdp neighbors GigabitEthernet3/15 find the device Capability Codes: R-Router, T-Trans Bridge, b-Source Route Bridge S-Switch, H-Host, I-IGMP, r-Repeater, p-PhoneDevice ID Local Intrfce Holdtme Capability Platform Port ID254150 Gig 3/15 166 s I WS-C2950G-Gig 0/2Cisco2924 # show mac-address-table dynamic address 0009.6b8c.64ec author a cat floating in the sky