Configuring Mac Filtering To Allow Or Block Traffic - Cisco QuickVPN - PC Administration Manual

Firewall Configuration
Using Other Tools to Prevent Attacks, Restrict Access, and Control Inbound Traffic
STEP 6
STEP 1
STEP 2
Cisco SA 500 Series Security Appliances Administration Guide
• Echo Storm (ping pkts/sec): Enter the number of pings per second that will
cause the security appliance to determine that an echo storm intrusion event
is occurring. Echo storm intrusion events are not blacklisted. This value can
range between 1 and 10,000 ping packets per second. The default is 15
ping packets per second.
• ICMP Flood [ICMP pkts./sec]: Enter the number of ICMP packets per
second, not including PING packets, that will cause the security appliance to
determine that an ICMP flood intrusion event is occurring. ICMP flood events
are not blacklisted. This value can range between 1 and 10,000 ICMP
packets per second. The default is 100 ICMP packets per second.
Click Apply to save your settings, or click Reset to revert to the saved settings.

Configuring MAC Filtering to Allow or Block Traffic

You can restrict WAN and DMZ traffic based on the MAC address of device. The
first step is to populate the list of MAC addresses to be covered by the filtering
policy. You can configure the policy either to block all MAC addresses in the list
and permit the rest, or to permit only the configured MAC addresses and block the
rest.
Click Firewall on the menu bar, and then click MAC Filtering > MAC Filtering in
the navigation tree.
The Source MAC Filter page appears.
Before you can add any addresses to the table, you must check the box to
NOTE
enable MAC filtering, and then click apply.
In the MAC Filtering Enable area, enter the following information:
• Enable MAC Address Filtering?: Check the box to enable Source MAC
Address Filtering.
• Policy for MAC Addresses listed below: Choose one of the following
options:
- Block and permit the rest: All addresses in the MAC Addresses table
are blocked. All other addresses are allowed.
5
138