Chapter 3:
Configuration
VPN Concentrator Installation and Configuration Guide
29
MAC Address Blacklist
If MAC Blacklist validation is enabled for STUNNEL, the MAC Address sent by the client is
validated against the configured MAC Address Blacklist. If the MAC Address is present in the
Blacklist then the session request is rejected.
The maximum number of MAC Addresses that can be configured at a time in the Blacklist
database is 1000. Only valid MAC addresses are allowed. Duplicate MAC Addresses cannot
be configured. If MAC Whitelist validation is enabled, MAC Whitelist validation is done after
MAC Blacklist validation.
To add or delete MAC addresses from the database, choose “Stunnel” submenu from
“Configuration Menu” and then choose “MAC Blacklist” submenu of “Stunnel.”
MAC addresses can be entered in the following format:
HH:HH:HH:HH:HH:HH[/X]
, where “
H”
is a hexadecimal digit from 0 to f.
The optional part /X specifies the number of hex digits from right to left. X can
be between 1 to 12.
Example: 12:34:56:78:90:AB/3 would match all the MAC addresses in the range
of 12:34:56:78:90:00 to 12:34:56:78:9F:FF
