HOW TO BLOCK OR RESTRICT MAC ADDRESS IN ZYXEL USG FLEX 100?

Options
Rodnie
Rodnie Posts: 11
First Comment Zyxel Certified Network Administrator - Security
edited January 2023 in Security
Is it possible to block or restrict the MAC ADDRESS of a device in Zyxel USG FLEX 100? if possible, how to do it?

Accepted Solution

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 781  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options
    Hi @Rodnie
    Greeting Forum, Please kindly enable IP/MAC Binding feature at interface where the IP/MAC from.

    IP address to MAC address binding helps ensure that only the intended devices get to use privileged IP addresses

    Suppose you configure access privileges for IP address 192.168.1.27 and assign it to Kevin's computer’s MAC address of 12:34:56:78:90:AB. IP/MAC binding drops traffic from any computer trying to use IP address 192.168.1.27 with another MAC address.

    Thank you
    Kevin

All Replies

  • CHS
    CHS Posts: 178  Master Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options
    For Layer3 router, ZyXEL firewall doesn't support block client by MAC address(Layer 2). You can only block MAC address by swtich or by AP profile.

    Or you can consider block client "IP traffic(Layer 3)" by current functions.
    (1) Add MAC address into "Static DHCP Table" settings, and assign a specific IP address for client.
    e.g. IP: 192.168.100.201, MAC: XX:XX:XX:XX:XX:XX
    (2) Block IP address by policy control rule.
    e.g. Source: 192.168.100.201, Destination: Any, Action: Deny.
  • Zyxel_Kevin
    Zyxel_Kevin Posts: 781  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options
    Hi @Rodnie
    Greeting Forum, Please kindly enable IP/MAC Binding feature at interface where the IP/MAC from.

    IP address to MAC address binding helps ensure that only the intended devices get to use privileged IP addresses

    Suppose you configure access privileges for IP address 192.168.1.27 and assign it to Kevin's computer’s MAC address of 12:34:56:78:90:AB. IP/MAC binding drops traffic from any computer trying to use IP address 192.168.1.27 with another MAC address.

    Thank you
    Kevin

Security Highlight