Configuring Mac Filtering - Infinity CHECK POINT 1100 Administration Manual

To enable/disable an existing route:
Select the route and click Enable or Disable.

Configuring MAC Filtering

MAC Filtering
MAC Filtering lets you manage a whitelist of MAC addresses that can access the LAN. All others
are blocked. The list is global for all interfaces defined on physical LAN ports.
To enable MAC filtering:
1. Turn the slider to ON.
2. Add a MAC address to the LAN MAC Filter whitelist.
Note - MAC filtering is not active when no MAC addresses are defined.
After MAC filtering is enabled, you can disable the feature for specified networks.
To edit the LAN MAC Filter whitelist:
1. Go to Device > MAC Filtering > LAN MAC Filter.
2. To add a new MAC Address, click Add > New.
3. To select MAC addresses from the list of Active Computers, click Add > Select.
4. To edit a MAC address, select it from the list and click Edit.
5. To delete a MAC address, select it from the list and click Delete.
To disable MAC filtering for a specific interface:
1. Go to Device > Local Network.
2. Select a LAN interface and click Edit
The Edit LAN window opens.
3. Click Advanced.
4. Select Disable MAC filtering.
To enable, clear this option.
5. Click Apply.
Limitations:
•
MAC filtering is not supported on external interfaces and over switches between physical LAN
ports (port-based VLANs). If you configure a physical switch between multiple LAN ports, you
cannot activate MAC filtering on this network. Replace the switch with a bridge configuration.
• To disable MAC filtering for a bridged LAN interface, you must reboot.
•
Traffic from a remote encryption domain is not MAC filtered.
• Broadcast traffic such as ARP and DHCP is not blocked.
•
To configure MAC filtering for a DMZ interface, you must use CLI. You cannot configure MAC
filtering in the WebUI.
Check Point 1100/1200R/1400 Appliances Centrally Managed Administration Guide R77.20.70
Appliance Configuration
| 74