How to ban certain MAC addresses from network on USG210

Derrick
Derrick Posts: 16  Freshman Member
First Anniversary First Comment
edited April 2021 in Security

Hi there, sorry I did search for an hour or two and came up empty.

My Question please is the following. from time to time some people figure out the password to connect to your network that should not. looking at the DHCP table I can see which devices MAC address I would like to kick off.


is there a way to deny them to connect or get an IP from the USG210?


I would appreciate some help with this.


thanks,

Derrick

Accepted Solution

All Replies

  • mMontana
    mMontana Posts: 1,298  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer

    Are these devices wired or wireless?

  • PeterUK
    PeterUK Posts: 2,651  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer

    What you can do is use IP /MAC Binding for the given MAC and IP to like 192.168.0.254 then make a firewall rule to block that source IP from any to any.

  • Derrick
    Derrick Posts: 16  Freshman Member
    First Anniversary First Comment

    thanks Peter. I thought of that, but the problem is that you are then wasting an IP address on a phone/laptop that you do not want on your network just to keep it of the network. would be nice if I could just tell it to not accept a certain MAC address

  • Derrick
    Derrick Posts: 16  Freshman Member
    First Anniversary First Comment

    aaaah. that sounds good. I will have a look tomorrow and update accordingly. Sounds like a good plan.


    thanks very much Peter

  • Derrick
    Derrick Posts: 16  Freshman Member
    First Anniversary First Comment

    ok so on the Zyxel WAC510's I rejected those MAC address. and it worked a charm thank you for the advice Peter


    thanks,

    Derrick

Security Highlight