Quick Start Guide WALL IE
21
8. MAC address filtering
With the function “MAC Filtering;” communication via the WALL IE can be limited to devices with certain MAC addresses (“Whitelisting”) or devices with certain MAC
addresses can be denied access (“Blacklisting”).
Filtering for each MAC address can be activated separately on the WAN, on the LAN, or on both sides (“ANY”).
MAC addresses must always be entered in the format “AA:BB:CC:DD:EE:FF”, whereby
numbers are to be indicated with hexadecimals.
Important:
MAC Filtering has the highest priority of all filters in the WALL IE. As soon as
the first MAC address has been entered in the MAC filter mode “Whitelist”, only frames
from this MAC address are allowed to pass through, irrespective of all other packet filter
rules.
If MAC filtering is used in the “Whitelist” mode, the MAC addresses of all permitted
devices are indicated.
If no MAC filter rule has been entered or activated, the “MAC Filtering” is completely
deactivated, irrespective of the “Default MAC Policy”.
MAC filtering can be used both in the NAT and in the Bridge operating mode.
Note:
In the NAT mode, the MAC filtering is only carried out WHEN the MAC address is
also indicated in the IP header of the packet. Layer 2 frames are not forwarded in the
NAT mode. The MAC filtering takes place on layer 2 in the bridge mode.
