How to ban certain MAC addresses from network on USG210

Derrick

Hi there, sorry I did search for an hour or two and came up empty.

My Question please is the following. from time to time some people figure out the password to connect to your network that should not. looking at the DHCP table I can see which devices MAC address I would like to kick off.

is there a way to deny them to connect or get an IP from the USG210?

I would appreciate some help with this.

thanks,

Derrick

PeterUK

If you got a AP or just a wired network to the USG you can put a managed switch between them to do MAC drop.

mMontana

Are these devices wired or wireless?

PeterUK

What you can do is use IP /MAC Binding for the given MAC and IP to like 192.168.0.254 then make a firewall rule to block that source IP from any to any.

Derrick

thanks Peter. I thought of that, but the problem is that you are then wasting an IP address on a phone/laptop that you do not want on your network just to keep it of the network. would be nice if I could just tell it to not accept a certain MAC address

PeterUK

If you got a AP or just a wired network to the USG you can put a managed switch between them to do MAC drop.

Derrick

aaaah. that sounds good. I will have a look tomorrow and update accordingly. Sounds like a good plan.

thanks very much Peter

Derrick

ok so on the Zyxel WAC510's I rejected those MAC address. and it worked a charm thank you for the advice Peter

thanks,

Derrick