Mac Access Control Lists - NETGEAR SXR50 User Manual

Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50

MAC access control lists

A MAC access control list (ACL) for a WiFi network (that is, an SSID) or the wired network
(that is, the LAN) allows or denies a device access to the network based only on the
MAC address of the device. If you block a device for one WiFi network or for the wired
network, the device is blocked only for that WiFi network or for the wired network. You
can set up an independent MAC ACL for each WiFi network and for the wired network.
(The router supports multiple MAC ACLs.) With a MAC ACL, you can allow or deny
access to a device on a specific WiFi network or the wired network.
Note: A MAC ACL differs from the network access control list (see Network access
control list on page 57). The network access control list is not specific to a particular
WiFi network or to the wired network but is based on both WiFi and wired devices that
the router detects on the entire Orbi network. To allow or deny access to a device on
a specific WiFi network or the wired network, use a MAC ACL. MAC ACLs and the
network access control list are mutually exclusive. Use either MAC ACLs or the network
access control list.
If you set up a MAC ACL with a policy that allows access to a specific network, devices
on the MAC ACL are an exception to the default policy:
• A device for which you place the MAC address on the MAC ACL is denied access to
that network.
• All other devices are allowed access to that network.
If you set up a MAC ACL with a policy that denies access to a specific network, devices
on the MAC ACL are an exception to the default policy:
• A device for which you place the MAC address on the MAC ACL is allowed access
to that work.
• All other devices are denied access to that network.
A blocked device can still get an IP address from the router but cannot communicate
with other devices on the network or connect to the Internet.
Note: Each network device owns a MAC address, which is a unique 12-character physical
address, containing the hexadecimal characters 0–9, a–f, or A–F (uppercase or lowercase)
only, and separated by colons (for example, 00:09:AB:CD:EF:01). Typically, the MAC
address is on the label of a device. If you cannot see the label, you can display the MAC
address using the network configuration utilities of a computer. You might also find the
MAC addresses on Attached Devices page of the router (see View satellites, WiFi devices,
and wired devices connected to the Orbi network on page 150).
Control Access to the Internet 52 User Manual