Cisco IOS router MAC or IP address filtering

ciscomac addressroutertraffic-filtering

I'm trying to filter a specific device from my network. Either MAC or IP address filtering would do the trick, but I have trouble finding the exact Cisco IOS commands to use. My router is a Cisco 870 and the device is connected through wifi (if that makes a difference).

I need a fairly simple setup that I can switch on and off easily. This is for development purposes and I need to simulate connectivity changes to that specific device without bothering anyone else connected to that same router.

ACL seems like a way some people suggest, but I am a noob when it comes to configuring Cisco routers and don't know how exactly to work with them.

Edit:

The commands Kyle mentioned did not work exactly as typed, but when I ran adjusted commands below, it does not appear to work:

ip access-list extended demo
deny ip host 192.168.3.33 any
permit ip any any
exit
interface Vlan 1
ip access-group demo in

Vlan 1 is the virtual interface the device is connected. I also tried running the last line after 

interface Dot11Radio 0

but that did not work either. Router does not give any errors, but the device can still access the network. Tips?

Best Answer

You might want to see Filters Using MAC-Based ACLs.

Can you provide details about the hardware / software you're running?

Update:

So based on the information you supplied I believe this is the correct answer. From the linked document above:

AP# configure terminal
AP<config># access-list 700 deny 0040.96a5.b5d4 0000.0000.0000

!--- This ACL denies all traffic to and from 
!--- the client with MAC address 0040.96a5.b5d4.

AP<config># interface Dot11Radio0.1


!--- Or whatever the radio interface is

AP<config># dot11 association mac-list 700
Related Topic