MAC Filtering

MAC filtering allows administrators to control LAN traffic routed through the zWAN CPE by managing a global list of MAC addresses with either an ALLOW or DENY action. This feature enables efficient traffic control at the edge controller, restricting or permitting internet access based on the device’s MAC address.

Overview

MAC filtering enhances traffic management on the zWAN edge controller. Once enabled, users specify whether to allow or deny traffic based on the MAC addresses added to the list. The feature is available under the Filtering section of the UI.

Functionality

The main functionalities of MAC filtering include:

1. Enable/Disable MAC Filtering

• Enabling activates MAC filtering with the preconfigured list, allowing or denying traffic based on the list entries. An IP set is created and attached to the forward chain, applying the configured rule.
• Disabling stops MAC filtering.

2. Select Action (ALLOW/DENY)

• ALLOW: Only MAC addresses in the allowlist can access the internet through the edge controller. If the list is empty, all traffic is blocked by default.
• DENY: Only addresses in the denylist are blocked, allowing all other traffic by default if the list is empty.

3. Add MAC Addresses to the List

Users can add MAC addresses by:

• Manually entering addresses (comma-separated for multiple entries).
• Selecting from the discovered MAC addresses in the UI.
• Importing a list from a comma-separated text file.

4. Delete MAC Addresses

Select one or multiple addresses to remove them from the list using the remove button.

Result

Once configured, LAN traffic is routed according to the selected MAC filtering action, restricting or permitting traffic based on the MAC list settings.