UNSOLVED

Jgasser

updated

21 years ago

J

Jgasser

3 Posts

0

17708

February 22nd, 2006 01:00

3324/48 Unable to bind MAC ACL

Hello All,
 
I am little better than a novice at switch configuration so I was hoping I could get pointed int he right direction.  We have two 3324 and single 3348.  The business wants MAC address filtering so that only machines which have gone through a security certification and inventory will be allowed on the network.  They have an older T1 router that dies whenever certain viruses get on the network.  There are a grand total of 130 MAC addresses in my MAC ACL, and I can get the ACL to bind to one fast ethernet port, but I get the HW resource lack error message when I try more than that.  I though over 200 ACEs were allowed per fast ethernet port so I am not sure what the issue is.  Here is my config in case it may help someone to help troubleshoot this issue.  I have cut out the majority of the ACEs for brevitys sake:
 

port storm-control rate fastethernet 100000

spanning-tree mode rstp

interface range ethernet 1/e(1-24),1/g(1-2)

spanning-tree portfast

exit

interface range ethernet 1/e(1,6,9,12,14,16,24),1/g(1-2)

spanning-tree cost 100

exit

interface range ethernet 1/e(2-5,7-8,10-11,13,15,17-23)

spanning-tree cost 19

exit

interface ethernet 1/e1

speed 100

exit

interface range ethernet 1/e1,1/g(1-2)

duplex full

exit

interface range ethernet 1/g(1-2)

speed 1000

exit

interface vlan 1

ip address 192.168.1.102 255.0.0.0

exit

ip default-gateway 192.168.1.1

no qos

mac access-list kappa

permit 00:11:11:3b:5d:c6 00:00:00:00:00:00 any vlan 1

permit 00:08:a1:1e:a7:f3 00:00:00:00:00:00 any vlan 1

permit 00:12:10:52:0b:1b 00:00:00:00:00:00 any vlan 1

exit

hostname "Basement 24 Port"

-----------------------------------------------

Any help with this issue would be greatly appreciated!

Regards,

James.