how to do a mac filter to let access to the internet? in a firewall USG40

PLOTEC

I NEED TO LEAVE MACS WITHOUT INTERNET ACCESS THAT I DON'T KNOW WHAT DEVICES BELONG

Zyxel_Emily

Hi @PLOTEC,

Here are two ways to block unknown devices for Internet access.

Method 1

1. Add known devices to IP/MAC binding list.

2. Create address/address group object for these known devices.

3. Create security policy rules as follows.

Rule 1: Set address object for known devices in Source to allow the known devices to access Internet.

Rule 2: deny all other unknown devices.

Method 2

Enable Web Authentication and issue username/password to known devices.

Unknown devices without valid username and password cannot access Internet.

Zyxel_Emily

Hi @PLOTEC,

Here are two ways to block unknown devices for Internet access.

Method 1

1. Add known devices to IP/MAC binding list.

2. Create address/address group object for these known devices.

3. Create security policy rules as follows.

Rule 1: Set address object for known devices in Source to allow the known devices to access Internet.

Rule 2: deny all other unknown devices.

Method 2

Enable Web Authentication and issue username/password to known devices.

Unknown devices without valid username and password cannot access Internet.

PLOTEC

Thanks, solve it with the first method