# VLAN Access-List (VACL)

**URL:** https://forum.networklessons.com/t/vlan-access-list-vacl/1155
**Category:** Lessons Discussion
**Created:** [December 27, 2016, 4:46pm UTC](https://forum.networklessons.com/t/vlan-access-list-vacl/1155 "2016-12-27T16:46:28Z")
**Posts on this page:** 1
**Showing post:** 6

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [October 23, 2015, 3:53pm UTC](https://forum.networklessons.com/t/vlan-access-list-vacl/1155/6 "2015-10-23T15:53:24Z")

</div>

@Ronie I just did some testing and I’m also seeing strange results when using a mac access-list to filter MAC addresses. I used two routers and one 3560 switch. When I apply the vlan filter, the routers are still able to ping each other until I clear their ARP tables. Once I do that, they are unable to reach each other anymore since some of the ARP packets get filtered.

I would expect all traffic that matches one of the MAC addresses to be filtered but for whatever reason, it’s acting weird.  
@Frades you can use port security to set a limit to the number of MAC addresses or you can use it as a MAC address filter. The last option will do the job but it’s not very secure, MAC addresses are easy to spoof.

---

_[View the full topic](https://forum.networklessons.com/t/vlan-access-list-vacl/1155)._