HOW TO BLOCK OR RESTRICT MAC ADDRESS IN ZYXEL USG FLEX 100?

Rodnie
Rodnie Posts: 11
Zyxel Certified Network Administrator - Security First Comment
edited January 2023 in Security
Is it possible to block or restrict the MAC ADDRESS of a device in Zyxel USG FLEX 100? if possible, how to do it?

Accepted Solution

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 891  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
    Answer ✓
    Hi @Rodnie
    Greeting Forum, Please kindly enable IP/MAC Binding feature at interface where the IP/MAC from.

    IP address to MAC address binding helps ensure that only the intended devices get to use privileged IP addresses

    Suppose you configure access privileges for IP address 192.168.1.27 and assign it to Kevin's computer’s MAC address of 12:34:56:78:90:AB. IP/MAC binding drops traffic from any computer trying to use IP address 192.168.1.27 with another MAC address.

    Thank you
    Kevin

All Replies

  • CHS
    CHS Posts: 181  Master Member
    5 Answers First Comment Friend Collector Sixth Anniversary
    For Layer3 router, ZyXEL firewall doesn't support block client by MAC address(Layer 2). You can only block MAC address by swtich or by AP profile.

    Or you can consider block client "IP traffic(Layer 3)" by current functions.
    (1) Add MAC address into "Static DHCP Table" settings, and assign a specific IP address for client.
    e.g. IP: 192.168.100.201, MAC: XX:XX:XX:XX:XX:XX
    (2) Block IP address by policy control rule.
    e.g. Source: 192.168.100.201, Destination: Any, Action: Deny.
  • Zyxel_Kevin
    Zyxel_Kevin Posts: 891  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
    Answer ✓
    Hi @Rodnie
    Greeting Forum, Please kindly enable IP/MAC Binding feature at interface where the IP/MAC from.

    IP address to MAC address binding helps ensure that only the intended devices get to use privileged IP addresses

    Suppose you configure access privileges for IP address 192.168.1.27 and assign it to Kevin's computer’s MAC address of 12:34:56:78:90:AB. IP/MAC binding drops traffic from any computer trying to use IP address 192.168.1.27 with another MAC address.

    Thank you
    Kevin