MAC address access control

Why does my airport express/time capsule show more wireless clients than I've authorized via the MAC address access control?

Sorry, but I have to re-awaken this old thread.
1. I recently purchased a new iPad.
2. With a) a hidden SSID, b) a MAC address-based access control list and c) a WPA2 secured network, I am assuming that no new device should be able to access my WiFi network.
3. When I got home with the new iPad on Friday evening, and started it, it was online without even asking me whether to connect, or what the WPA2 key was.
I find this strange.
Additional information:
4. I also have an iPhone 4S.
5. I used the personal hotspot feature of the iPhone 4S to connect the WiFi-only iPad to the Internet while on the road.
6. That personal hotspot feature was still enabled when I got home with the iPhone and the new iPad.
7. Home network setup:
7a) Fritz.Box 7270 as DSL modem/router (WiFi disabled)
7b) Apple Airport Extreme (v 7.6.4) connected via LAN to DSL router, (in bridge mode, create wireless network), Access control on this base station.
7c) Apple Airport Express (v 7.6.4) connecte to Airport Extreme via WiFi (extend wireless network), Access control not an option on this base station.
8. Native IPv6 enabled on all devices (and provided by ISP).
Any suggestion and help is highly appreciated.

Similar Messages

MAC address access control default?

I'm still using old graphite ABS, and all of them
are using MAC address access control.
Just by accident I connected a PB G4 with an
internal extreme Airport card.
The MAC address of this AirPort card wasn't in the
access list of the ABS.
It looks like ABS does only limit access through
MAC addresses for 802.11b cards. I'll spend some time
to double check this behaviour.
Did anyone already see this default of access
control?

I'm pretty well aware of the limitations of any kind of
MAC address control: in an hostile environment its a
"straw house" or an "empty extinguisher".
But in a collaborative and friendly environment I thought
it may be a useful "frontier marker" between "friendly" and
clearly "hostile" behaviors.
This belief was foolish.

Display MAC (media access control) address of connected access point.

Hi all! Sorry if this is already posted somewhere but I tried searching and was having difficulty because of the word MAC having multiple meanings here.
Anyways I want to be able to view the MAC (media access control) address of the access point I am connected to. Is this possible? I can't find it in System Preferences. Is there a terminal command that would allow me to see it? Any help would be MUCH appreciated. Thanks!

I'm looking at it right now. In the top portion, next to the active graph, it has the SSID of my access point. In the table beneath that, my access point is the first on the list, and the MAC address is clearly visible.
Second if I click on my access point in the list, the MAC address appears, temporarily at the bottom of the window.
For comparison, in the iStumbler preferences, on the AirPort tab, I have only "Auto-Select Best Network" & "Keep on Top" selected.

Require MAC (Media Access Control) address for my ...

Hi
I recently bought the Nokia C6.
I want to connect to my WiFi network in my office.
My network administrator require the MAC (Media Access Control) address of my set to give me access to the network.
How can I find this address for my set?
Solved!
Go to Solution.

On home screen:
Open the number keypad (button in the middle in bottom row) and then dial *#62209526# (equals *#MAC0WLAN#) => Device will show your WLAN MAC address.

Extended 48-bit MAC address access list

How can I apply extended 48-bit MAC address access list on Cisco 7606?

You can use the following example for the MAC address based access list :
mac access-list extended CAPTURE 10
permit any any
vlan access-map IDS 10
match mac address CAPTURE
action forward capture
vlan filter IDS vlan-list 115,119
interface FastEthernet 3/48
switchport
switchport capture

MAC (Media Access Control)Addreess, Network Card address.

Hi ,
Could you please tell me
how to read computer's MAC Address using Java programme.
its urgent !
Thanks
ramesh

You can get the mac address by running ipconfig in a
DOS prompt and parsing out the data.
//First run ipconfig
Process conf =
Runtime.getRuntime().exec("c:/windows/ipconfig.exe
/all");
// then parse out the response
DataInputStream ds = new
DataInputStream(conf.getInputStream());
while ((String lineItem = ds.readLine()) != null) {
// look for index of "Physical Address" and you have
e it
There is a lot more information returned here as well
you might find usefull.This solution seems platform specific. Do you have a solution that is more portable?

Mac-address access lists

I have a single remote device attached to a 1700 sereis router. I need to ensure that if anyone disconnects the device, they can't easily plug anything elses in to the router and hence wanted to use a mac-adddress access list.
I have created an access list as follows:
access-list 700 permit xxxx.xxxx.xxxx 0000.0000.0000, but there appears to be no way to add this to the Fa0 interface on the router.
Can anyone confirm if this is possible on a router or does this only work on a switch?

No, its the Ethernet local LAN interface of a routed link so no bridging going on.
Config below:
interface FastEthernet0
description Mufulira Post Office Post Office LAN
ip address xxx.xxx.xxx.xxx 255.255.255.248
ip access-group 120 in
no ip redirects
no ip unreachables
no ip proxy-arp
no ip mroute-cache
speed auto
full-duplex
no cdp enable
IP access lst 120 defines just a single host allowed in to a group of servers.
I'm having to tie everything down as much as possible as its for a remote ATM on the end of a Wireless backhaul link and our Risk people are trying to insist that we use mac address security as well. I am already running a GRE tunnel and IPSec 3DES over the routed portion of the link.

WRT160N V3 router ignores MAC address Access Restrictions, Filtering policies

I have added a list of 2 MAC addresses in the Access Restrictions for the access policy #1 and enabled it with Allow policy. But one of my PC's MAC address which is not on the list of access policy #1 still can access the internet and ping websites. I tried to add a Deny policy in 2nd policy for this PC MAC address and then it can not ping websites anymore.
The problem is why my PC with a MAC address not on the list of Allow Policy #1 can access the internet? It seems the router Access Restrictions don't work well.

I've already added Deny rule (blocking all LAN IPs) to all computers accessing my network in Access Restrictions Policy #1 but I leave one PC left to access the router web configuration.
Then in Acess Restrictions Policy #2, I added an Allow rule to one of my PC's MAC addresses (and its IP too) but the PC can not access internet and ping websites. It looks like the allow rule in policy #2 doesn't overwrite the Deny rule in Policy #1.

Browser corrupting MAC address access-list in 1232 AP

We're having a problem with an access point when we try to build Mac Address filter tables using the browser inteface. Here is what we have:
Product/Model Number: AIR-AP1232AG-A-K9
System Software Filename: c1200-k9w7-tar.123-8.JEA
System Software Version: 12.3(8)JEA
Bootloader Version: 12.3(2)JA4
Something is corrupting browser generated Mac address filter lists and causing us to have to manually remove the lists using the CLI even though the CLI was never used as the list was being entered initially.
When the browser works, the CLI shows the table as:
permit 0040.965d.db6b 0000.0000.0000 (3799 matches)
permit 0016.e3ec.3e06 0000.0000.0000
permit 00a0.f8ec.9dcd 0000.0000.0000 (7814 matches)
permit 001c.26c8.3f60 0000.0000.0000
permit 001a.731e.4f6e 0000.0000.0000
permit 0040.9652.50ff 0000.0000.0000 (5899 matches)
permit 0040.9649.08c0 0000.0000.0000 (2010 matches)
deny 0000.0000.0000 ffff.ffff.ffff
When the browser doesn't work, it shows up like this in the CLI:
permit 0016.e3ec.3e06 0000.0000.0000
permit 00a0.f8ec.9dcd 0000.0000.0000
permit 001c.26c8.3f60 0000.0000.0000
permit 001a.731e.4f6e 0000.0000.0000
permit 0040.9652.50ff 0000.0000.0000 (179 matches)
permit 0015.7032.7e37 0000.0000.0000
deny 0000.0000.0000 ffff.ffff.ffff (69 matches)
permit 0040.9649.08c0 0000.0000.0000
With the last permit entry that follows the deny being one that we tried to add.
Is there a way to use the CLI to edit the list so that it can be updated by the browser? Any ideas why the list is getting messed up like this in first place? Do we need to upgrade the AP's software?

Are you IE. If you have Google toolbar check if you have any Pop-up blocker or Anti-spy in the system blocking this . Try disabling them . If it doesnt work try using Mozilla Firefox.

MAC (Media Access Control) filtering

I have MAC filtering set on my wireless router. How can I find the MAC address of my iPod Touch to be able to let it thru'?
Thanks
Nigel

Ben,
Many thanks for that and sorry for the slow reply!
Now I just need to find how to get my music and videos onto it without having to use iTunes or download stuff and pay for it! I will be happy.
Thanks
Nigel

MAC address and router access control

My iPhone 3GS can only access the network (through my Netgear KWGR614 wireless router) when the router's MAC address access control is off. When I turn it on the phone is blocked. The MAC address I use is taken from the iPhone settings. It begins with 64. All other MAC addresses I have ever seen begins with 00. Is this MAC address correct? If it is right, could it be that the router can't handle this address?

The first 3 bytes of the mac address identifies the manufacturer. For example, mine starts with 04:1e:64 which is Apple
04-1E-64 (hex) Apple, Inc
041E64 (base 16) Apple, Inc
1 Infinite Loop
Cupertino CA 95014
UNITED STATES
. if it starts with 64 then it belongs to
64-4F-74 (hex) LENUS Co., Ltd.
644F74 (base 16) LENUS Co., Ltd.
18-5 Gwacheon-Dong
Gwacheon Gyeonggi-Do 427-060
KOREA, REPUBLIC OF
check this list : http://standards.ieee.org/regauth/oui/index.shtml
enter your first 3 numbers (first 3 pairs) from your wifi (settings/general/about) (don't use colons in the search)
Not sure about the router as I never tried mac filtering. Each router will behave differently.
Hope this helps.

Access Control not working as expected after upgrade to 7.5.2

I have a Time Capsule set up with mac address access control on the main network plus a guest network. After the upgrade to 7.5.2, it seems that the access control is applying to my guest network and the main network is allowing all devices on it. Has anyone else seen anything like this and/or know what to do about it?

I am also seeing this behavior. The workaround is to add all the guest network devices to your ACL. But this is a regression - there isn't much point in having a guest network that requires updating the base station each time a new device joins.

Can't add new MAC address to MAC ACL on Airport Express

Hi,
I just recently got a new iPhone 3GS. When I logged into my Airport Express to add it's MAC address to the ACL I found that the + icon was greyed out. I can modify old MAC addresses in the list and delete addresses, but I can't add new ones. Anyone have any idea why this might be the case. It seems like I can modify all other settings without any problems. I restarted the basestation, no help. I also even reset the password just incase, as you might expect that didn't help either. Any thoughts? Thanks.
Setup:
WDS with 2 other access points
Mac Address Access Control set to "Local"

If you are configuring the router as MGCP, you do not enter the mac address, just the router name.

"LOCAL" not available in the access control list

trying to enable mac address access control. however i only see timed and radius in the pulldown menu. do i need to reconfigure the base station? connect via ethernet while i set it up? thanks.

use the "timed" version and set it for unlimited access

Airport Express WiFi network MAC address filtering not working

I have an Airport Express WiFi network which I bought and installed new in 2011. Initially I enabled MAC address access control and populated a list. It was working perfectly, I know, because a niece visiting tried to connect her iPhone and could not until I added its MAC address to the allowed list. Now however, anyone can connect without being added to the list. I think I read somewhere that a recent firmware update permanently disabled MAC filtering in Airport Express, even when it was previously working? Can anyone enlighten me about what's going on here?

In a sense those are/were/should operate as two separate functions, which they did before recently.
They do operate as two separate functions.....but it all depends on how you have the default rule setup in Timed Access.
If the default rule in Timed Access is set to No Access.......then a wireless device cannot connect....even it has the password for the network.....unless it has been setup on the list of allowed devices in Timed Access.
I have checked this 3 times this evening to verify. It works as it always has, and as expected.
If the default rule in Timed Access is set to Unlimited, then any device can connect to the network if it has the password. Devices that are listed or specified in Timed Access will be allowed to connect at the specific times that have been set up for each device.
So, if you want to use the more traditional MAC Access Control settings, the default rule has to be set to No Access and then you must set up a rule for each device that you want to allow to connect to the network. Only devices on the Timed Access list will be allowed to connect to the network. Other devices will not be able to connect to the network....even if they have the correct password.
If a recent firmware update has changed things from what they have always been.....then I am not affected....and I should be if I am using the same firmware as others.

MAC address access control

Similar Messages

Maybe you are looking for