Using Pix 515e for mac address filtering

rajthampi · 10-18-2006, 03:36 AM

Hi guys
I am working for a medium sized organization and we have around 100 users hooked up with our network. We were using a Linksys BEFSR41 router to control access to internet, mostly by blocking mac addresses or IP ranges. Last year we had introduced a Cisco Pix 515e firewall during MS Exchange implementation. Those guys who configured the Pix firewall repeatedly reported that Pix firewalls can't do MAC address filtering.

I just want to know whether those statements are true. If they were giving us wrong feeds we need to get somebody who can configure the firewall properly, as we are having a tough time controlling users with administrative privileges changing their IP addresses to access Internet without company approval.

Thanks in advance

**johnwill** · 10-18-2006, 01:27 PM

You need to consult the documentation with the firewall. Since you have to be a Cisco customer to access the documentation, I can't see it from here.

Here's one paper on the device... http://www.netcraftsmen.net/welcher/papers/pix01.html

**bilbus** · 11-02-2006, 07:20 PM

send out a letter

"if you circumvent security you will be terminated"

after you fire the first 3 people it will stop.

Or setup a Vlan, seperate the people who should have access to internet put them on one group of switches. Group all non internet users on antoher switch.

allow group one vlan access to internet switch port, and prevent access to that port for the other users.

10-18-2006, 03:36 AM	#1 (permalink)
rajthampi Registered User Join Date: Oct 2004 Location: Kuwait Posts: 123 OS: Windows 2003, Windows XP SP3...	Using Pix 515e for mac address filtering Hi guys I am working for a medium sized organization and we have around 100 users hooked up with our network. We were using a Linksys BEFSR41 router to control access to internet, mostly by blocking mac addresses or IP ranges. Last year we had introduced a Cisco Pix 515e firewall during MS Exchange implementation. Those guys who configured the Pix firewall repeatedly reported that Pix firewalls can't do MAC address filtering. I just want to know whether those statements are true. If they were giving us wrong feeds we need to get somebody who can configure the firewall properly, as we are having a tough time controlling users with administrative privileges changing their IP addresses to access Internet without company approval. Thanks in advance __________________ If it is a door, It will open.

10-18-2006, 01:27 PM	#2 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,721 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	You need to consult the documentation with the firewall. Since you have to be a Cisco customer to access the documentation, I can't see it from here. Here's one paper on the device... http://www.netcraftsmen.net/welcher/papers/pix01.html __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience

11-02-2006, 07:20 PM	#3 (permalink)
bilbus TSF Enthusiast Join Date: Aug 2006 Posts: 949 OS: OS2 Warp	send out a letter "if you circumvent security you will be terminated" after you fire the first 3 people it will stop. Or setup a Vlan, seperate the people who should have access to internet put them on one group of switches. Group all non internet users on antoher switch. allow group one vlan access to internet switch port, and prevent access to that port for the other users.