How to ban certain MAC addresses from network on USG210
Hi there, sorry I did search for an hour or two and came up empty.
My Question please is the following. from time to time some people figure out the password to connect to your network that should not. looking at the DHCP table I can see which devices MAC address I would like to kick off.
is there a way to deny them to connect or get an IP from the USG210?
I would appreciate some help with this.
thanks,
Derrick
Accepted Solution
-
If you got a AP or just a wired network to the USG you can put a managed switch between them to do MAC drop.
5
All Replies
-
Are these devices wired or wireless?
0 -
What you can do is use IP /MAC Binding for the given MAC and IP to like 192.168.0.254 then make a firewall rule to block that source IP from any to any.
0 -
thanks Peter. I thought of that, but the problem is that you are then wasting an IP address on a phone/laptop that you do not want on your network just to keep it of the network. would be nice if I could just tell it to not accept a certain MAC address
0 -
If you got a AP or just a wired network to the USG you can put a managed switch between them to do MAC drop.
5 -
aaaah. that sounds good. I will have a look tomorrow and update accordingly. Sounds like a good plan.
thanks very much Peter
0 -
ok so on the Zyxel WAC510's I rejected those MAC address. and it worked a charm thank you for the advice Peter
thanks,
Derrick
0
Categories
- All Categories
- 415 Beta Program
- 2.3K Nebula
- 141 Nebula Ideas
- 94 Nebula Status and Incidents
- 5.6K Security
- 218 USG FLEX H Series
- 262 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 1K Wireless
- 39 Wireless Ideas
- 6.3K Consumer Product
- 245 Service & License
- 382 News and Release
- 81 Security Advisories
- 27 Education Center
- 8 [Campaign] Zyxel Network Detective
- 3.1K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 83 About Community
- 71 Security Highlight