RT-N66U and Mac Id's

[cofetym]

Have it set up correctly to only allow my set devices. My wife recently purchased a new laptop and was able to connect immediately with just the security password.
How is this allowed without that particular mac id not assigned in the router.

This has also happened with my kids Kindles that they received as gifts. I was under the impression that if this feature was selected that it would block the device trying to connect. Unless the mac id was assigned in the router.

I'm using RMerlins latest build 43.

 

[L&LD]

Connected and allowing access are two different things.

Did the new devices actually have internet and LAN access?

Either way, mac based security is a false sense of security for the most part.

 

[cofetym]

I understand the short comings of mac id's but it's still an option that's available on just about all routers. So answer this, Why is it still an option ?

I'm just trying to find out if the mac id set up is working properly or not!
The new wireless devices had full access to the internet with no mac id assigned and set to accept via the router.

 

[Crazy]

If you setup the MAC filter make sure it is enabled and set "Mac filter mode" to accept. Also if you setup filter on the 2.5 ghz it doesn't filter on the 5 ghz. So you need to set that up too.

 

[L&LD]

Thanks Crazy.

As to why its still an option? Same reason WPS is. But that doesn't mean either of them should be used.

 

[cofetym]

Thanks for the input Crazy but I know how to set it up. Doesn't seem like my post is being read properly.
Maybe RMerlin might be able to shed some light as to whether it's working correctly by testing on one of his routers.

 

[Crazy]

I know it is working on my ac66u. As I had it off and on just over the weekend. Also do you have a wireless repeater? It can cause problem. As my linksys wireless repeater changes the MAC address of the device connected to it.

@L&LD: Having wireless signal is a risk, but doesn't mean we shouldn't use it. Not a lot of ppl are tech savvy enought to he able to hack of spoof MAC address. I use to control my devices on 2.5ghz (Long story). Every setting have their up side and down side. Nothing is bullet proof.

 

[Ford Prefect]

...FWiW:

Wireless MAC filter allows you to control packets from devices with specified MAC address in your Wireless LAN.

...this is what it states inside the ASUS-UI...no word about "disabling access for wireless clients based on MACs".

 

[ColinTaylor]

...this is what it states inside the ASUS-UI...no word about "disabling access for wireless clients based on MACs".

Yes it does, read further...
MAC Filter Mode > "In Accept mode, the RT-N66U only accept clients with MAC address in the list."

I'm using it in Reject mode (to force my Blu-ray player to connect to a closer access point) and it works perfectly.

@cofetym: Can you verify the settings from the command line?

# wl mac
# wl macmode

PS

...was able to connect immediately with just the security password

You are referring to the WPA key aren't you, not the WPS PIN?

 

[Ford Prefect]

Yes it does, read further...
MAC Filter Mode > "In Accept mode, the RT-N66U only accept clients with MAC address in the list."

...ok, ok, I *know* that this feature should do what is reguested by the OP, but
*where* do I "...read further?"

 

[ColinTaylor]

...ok, ok, I *know* that this feature should do what is reguested by the OP, but
*where* do I "...read further?"

Move your mouse pointer over "MAC Filter Mode" until "?" appears then click for extra info.

 

[cofetym]

Crazy I have a Belkin repeater on the second floor, that just might be the problem then. Never had this problem though when I switched from my Linksys routers to Asus.

 

[cofetym]

ColinTaylor wpa2 passphrase is what I'm working with and I'm unfamiliar with cmd line feature and access. I don't get to heavily involved in code and like things pretty simple if possible. Definitely prepared to learn something new though.

 

[ColinTaylor]

Crazy I have a Belkin repeater on the second floor, that just might be the problem then. Never had this problem though when I switched from my Linksys routers to Asus.

That would make sense, so it's definitely worth investigating.

I used a Belkin wireless repeater for a while a few years back. (Promised myself I'd never buy another Belkin product after that!)

The problem with wireless repeaters is that it's an inherently broken system. IIRC the wireless packet protocol can only hold 3 MAC addresses and you need 4 to do proper repeating. So the manufacturer either employs their own proprietary protocol between their own devices (i.e. Buffalo) or they fudge it like Belkin and most others. What you end up with is all client packets sent via the repeater to the base station having the MAC address of the repeater, not their own MAC address.

One symptom of this is if multiple devices are using the repeater, a Windows XP machine (for example) connected to the router will see multiple IP addresses appearing on the network all with the same MAC address and start popping up "Duplicate IP Addresses found" messages!

http://en.wikipedia.org/wiki/Wireless_repeater "However, as far as the original router or access point is concerned only the repeater MAC is connected. So safety features must be enabled on the wireless repeater as well."

http://en.wikipedia.org/wiki/Wireless_distribution_system "The notable advantage of WDS over other solutions is it preserves the MAC addresses of client frames across links between access points."

Anyway, rant about wireless repeaters over

 

[cofetym]

Thanks, Colin.