Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

iMacZealot

macrumors 68020
Original poster
Mar 11, 2005
2,237
3
I've played around with MAC address access control, and that system only allows the MAC addresses that I specify are allowed. Is there an inverse--- a list of MAC addresses that aren't allowed?

Thanks.
 
I for one am not entirely sure on the matter, but I believe the answer is no. If you want to restrict your network more, add a password for security. My Aiport is set up the same way, with only specific Mac Addresses allowed, though we've never had to block particular ones.
 
I for one am not entirely sure on the matter, but I believe the answer is no. If you want to restrict your network more, add a password for security. My Aiport is set up the same way, with only specific Mac Addresses allowed, though we've never had to block particular ones.

I'm not so concerned about security since no signal reaches the neighbors' houses, but rather speed and range. I want certain devices to communicate only with a designated network, and the ability to divert a device off one network and onto another in case it is slowing a network down.
 
I've played around with MAC address access control, and that system only allows the MAC addresses that I specify are allowed. Is there an inverse--- a list of MAC addresses that aren't allowed?

Thanks.
Add the MAC you want to reject to the "Timed Access" list, but change the default "Everyday" selection to "No Access" (it's right at the top of the list).
 
Add the MAC you want to reject to the "Timed Access" list, but change the default "Everyday" selection to "No Access" (it's right at the top of the list).

But if the Timed Access list is turned on, aren't all the addresses that aren't on the list rejected, too?
 
But if the Timed Access list is turned on, aren't all the addresses that aren't on the list rejected, too?

Good point! :confused: I had to go check my setup....

On my list, there's a catch-all "default" MAC address at the top which is set to "Unlimited" (Everyday, all day) access. Below that, there's my list of individual MACs with their own personalized restrictions.

So any MACs which I haven't specifically named and restricted get free reign.
 
Good point! :confused: I had to go check my setup....

On my list, there's a catch-all "default" MAC address at the top which is set to "Unlimited" access. Below that, there's my list of individual MACs with their own personalized restrictions.

So any MACs which I haven't specifically named and restricted get free reign.

So, if I have the "default" MAC address to unlimited, it will allow everyone, and then I can have my blacklist from there?
 
So, if I have the "default" MAC address to unlimited, it will allow everyone, and then I can have my blacklist from there?

Yes. I just tested it with a macbook and an ipod touch. The macbook got network access under the default ("unlimited") entry, but since I'd put the MAC address of the touch in the list and specified NO ACCESS (just for it), it was locked out.
 
Yes. I just tested it with a macbook and an ipod touch. The macbook got network access under the default ("unlimited") entry, but since I'd put the MAC address of the touch in the list and specified NO ACCESS (just for it), it was locked out.

Thanks! Now I just need to gather all 13 MAC addresses in the house. :eek:
 
You didn't already have them in your AEBS list? :p

This thread is great -- I also thought the answer was that this could not be done; I'm pleased (and making a mental note) to be wrong. :)

I have most of the addys, but I'm not sure which devices they actually are.

I'm also glad we found a solution, but I don't think I can use it because for some reason, the MAC Address Access Control list in my AirPort Express WDS remote is a 'local' list, not a 'timed' one like in my AirPort Extreme WDS main, and the 'default' listing doesn't show up in the 'local' list.
 
... the 'default' listing doesn't show up in the 'local' list.

Is your Express one of the older G models?

I have an old G and a newer N. I just checked both. Like you said, the 'G' version doesn't have the 'default' entry, but the 'N' does. Firmware is up to date on both, btw (6.3 on G, 7.3.2 on N).
 
Is your Express one of the older G models?

I have an old G and a newer N. I just checked both. Like you said, the 'G' version doesn't have the 'default' entry, but the 'N' does. Firmware is up to date on both, btw (6.3 on G, 7.3.2 on N).

Yeah. I have a G Express and an N Extreme. I didn't know if the default entry didn't show up because it was an Express or because it's a WDS remote.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.