Is it possible to isolate a network device from the rest of the LAN via its MAC address ?

Question

Im familiar with creating a VLAN based on a tagged port of the network switch, but is it possible by recognising the devices MAC address ?

If using (certain) Cisco devices you can implement MAC address based Access Control Lists. I don't know about other brands but I'm assuming they have something similar. — joeqwerty, Sep 23 '17 at 21:58

score 0 · Answer 1 · answered Sep 23 '17 at 21:36

0

Yes, MAC based vLANs are possible. It depends on your switch's capabilities. You create a MAC address to vLAN map.

Here's an example of a Netgear and Cisco has it too, as well as many others I'm sure.

answered Sep 23 '17 at 21:36

Appleoddity

Thanks @Appleoddity would it depend on the switch or the router ? We tend to have a mix of netgear switches and draytek routers – sam Sep 23 '17 at 21:38
Yes, that is exactly what it depends on. – Appleoddity Sep 23 '17 at 21:40
The isolation must be an the uplink device the MAC is connected to, most likely that's the switch. – Zac67 Sep 24 '17 at 08:08
Thanks Zac. I think I misunderstood the question. Yes, it is configured on whatever device the computer plugs in to. – Appleoddity Sep 24 '17 at 12:24

1 Answers1