How to restrict internet only to user via Cisco?

Question

Computer networks

Hello. A little background at work, there is Cisco equipment and there is a user in the workplace who likes to surf the Internet and do nothing. They told him to restrict the Internet (But the LAN must be left) They
suggested blocking by MAC addresses (I know them) So how to implement all this through Cisco?

Answer 1

Mac is unlikely to help you here. The standard solution is to hang ACL on the output / broadcast and in this sheet kill a specific computer by IP, But in general you gave little information. How do your users go to the Internet? Is Cisco directly connected to Provo? Is there any proxy?