Moving MAC-based ACLs onto Meraki Switches

[navysubvet]

Is it possible to duplicate my existing MAC ACLs on Cat 3ks, and build them on the Meraki MS Switches? Is there another way to accomplish this via policies or?

Example:

Extended MAC access list ACME

 permit host 001x.002x.003x any

[alemabrahao · Accepted solution]

There is no MAC ACL Group on Meraki Switch. But you can use it:

• MAC allow list: Only devices with MAC addresses specified in this list will have access to this port.  Up to 20 MAC addresses can be defined.
• Sticky MAC allow list: The switch will dynamically learn the MAC addresses of devices connected to the port and place the address in the MAC Whitelist.  The administrator can define the size of this list.  When this list is full, all subsequent devices will be denied access to this port.  It can take up to 5 minutes for the learned MAC to appear in dashboard.

https://documentation.meraki.com/MS/Port_and_VLAN_Configuration/Switch_Ports

[navysubvet]

Follow-up question...

Most of the ACLs have only 1-2 MACs, but there are a few with more than 20 MAC listed. Should I go with the Sticky MAC option on those ports? Will it allow me to enter all the macs there?

[alemabrahao]

Yes, you can define the size of this list, so I think that It's the best option.

[navysubvet]

Thank You. I really appreciate your help