HOW TO BLOCK OR RESTRICT MAC ADDRESS IN ZYXEL USG FLEX 100?

Rodnie
Rodnie Posts: 11
First Comment Zyxel Certified Network Administrator - Security
edited January 2023 in Security
Is it possible to block or restrict the MAC ADDRESS of a device in Zyxel USG FLEX 100? if possible, how to do it?

Accepted Solution

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 862  Zyxel Employee
    100 Answers Second Anniversary 500 Comments Zyxel Certified Sales Associate
    Answer ✓
    Hi @Rodnie, 
    Greeting Forum, Please kindly enable IP/MAC Binding feature at interface where the IP/MAC from.

    IP address to MAC address binding helps ensure that only the intended devices get to use privileged IP addresses

    Suppose you configure access privileges for IP address 192.168.1.27 and assign it to Kevin's computer’s MAC address of 12:34:56:78:90:AB. IP/MAC binding drops traffic from any computer trying to use IP address 192.168.1.27 with another MAC address.

    Thank you
    Kevin

All Replies

  • CHS
    CHS Posts: 181  Master Member
    Sixth Anniversary 5 Answers 10 Comments Friend Collector
    For Layer3 router, ZyXEL firewall doesn't support block client by MAC address(Layer 2). You can only block MAC address by swtich or by AP profile.

    Or you can consider block client "IP traffic(Layer 3)" by current functions.
    (1) Add MAC address into "Static DHCP Table" settings, and assign a specific IP address for client.
    e.g. IP: 192.168.100.201, MAC: XX:XX:XX:XX:XX:XX
    (2) Block IP address by policy control rule.
    e.g. Source: 192.168.100.201, Destination: Any, Action: Deny.
  • Zyxel_Kevin
    Zyxel_Kevin Posts: 862  Zyxel Employee
    100 Answers Second Anniversary 500 Comments Zyxel Certified Sales Associate
    Answer ✓
    Hi @Rodnie, 
    Greeting Forum, Please kindly enable IP/MAC Binding feature at interface where the IP/MAC from.

    IP address to MAC address binding helps ensure that only the intended devices get to use privileged IP addresses

    Suppose you configure access privileges for IP address 192.168.1.27 and assign it to Kevin's computer’s MAC address of 12:34:56:78:90:AB. IP/MAC binding drops traffic from any computer trying to use IP address 192.168.1.27 with another MAC address.

    Thank you
    Kevin

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）