XGS1930 and MAC filtering on a port

Venta

Hallo,
can someone help me if XGS1930 does support MAC filtering on a port, so only a LIST of supported MAC are allowed on this port to connect?
If it is supported, how can i configure it and is configuration also possible over Nebula?

Thanks
Wolfgang

Zyxel_Melen

Hi @Venta

MAC filter is a list of MAC that been blocked. It is not an allowed list for switch.

May you share your scenario so we can help to find a solution?

Venta

My idea: I have a port configured for a special VLAN which have a lot of rights assigned on the firewall based on the VLAN.
So the idea was to restrict access on this special port to only some MAC-Addresses.

Any idea how to do this?

Zyxel_Melen

Hi @Venta

For this purpose, you need to configure via device's local GUI since it is not supported on Nebula control center.

Here are the steps:

1. Upgrade your XGS1930 to V5.00 firmware version.
2. Finish other configurations on Nebula first.
3. Access device local GUI to configure port security & Static MAC Forwarding.
   1. Set port security:
      Path: Menu > Security > port security.
      
      1. Activate port security.
      2. Activate port security for specific port(s).
      3. Inactivate address learning.
      4. Limited number of learned MAC address needs to be 0.
   2. Set static MAC forwarding:
      Path: Menu > Switching > Static MAC Forwarding.
      
      1. Click Add/Edit button to add the MAC address.
      2. Enter the MAC address and other value.
      3. Click apply button.

Note:

1. The configuration that edited/configured from device's local GUI will not sync to Nebula.
2. Change configuration on Nebula might cause these configurations been overwritten.
3. Local device's local GUI requires to use your site's local credential. Please reference this FAQ to find it.

https://community.zyxel.com/en/discussion/21958/what-is-the-password-is-if-i-want-to-login-via-lan-to-the-nebula-device

Hope this helps.

Venta

Thank you so much.

Is there any plan when this option is also available via Nebula?