Filtering MAC addresses
Kerio Control allows filtering by hardware addresses (MAC addresses). Filtering by MAC addresses ensures that specific devices can be allowed or denied, regardless of their IP Address.
NOTE
The MAC addressMedia Access Control Address - A unique identifier that specifies a device in a network. filter is processed independently of traffic rules.
Configuring the filter
- In the administration interface, go to Security Settings.
- On the MAC Filter tab, select Enable MAC Filter.
- Select the network interface where the MAC filter will be applied (usually LANLocal area network - A network that connects computers and other devices in a small area.).
- Select the filter mode:
- Prevent listed computers from accessing the network — The filter blocks only MAC addresses included in the list. This mode can be used to block known MAC addresses, but does not filter traffic of new, unknown devices.
- Permit only listed computers to access the network — The filter allows only MAC addresses included in the list, any other address is blocked. Select the Also permit MAC addresses used in DHCPDynamic Host Configuration Protocol - A protocol that automatically gives IP addresses and additional configuration to hosts in a network. reservations or automatic user login option if you use automatic user login and DHCP reservation by MAC. MAC addresses allowed by automatic user login and DHCP reservations are not visible in the MAC addresses list (see below).
- Add MAC addresses to the list. You can use the following separator in the MAC addresses:
- colons (e.g.:
a0:de:bf:33:ce:12
) - dashes (e.g.:
a0-de-bf-33-ce-12
) - no separators (
a0debf33ce12
)
- Double check that listed addresses are correct.
- Click Apply.
Your filter is fully configured and active.