Linksys Mac Filtering

acidrayne · 05-23-2002

I was wondering if someone could help me out with the MAC filtering for a Linksys WAP11

From what I see in the config it appears that the MAC Filtering on the filter tab is for excluding particular MAC addresses from accessing the AP or from accessing the internet connection. When I enter the mac of another pc on my network then that pc can still get online and everywhere on the network. When I put in my MAC I can still get everywhere on the network and online.

I found that if I use the IP filtering that I can restrict internet access to particular ranges of IPs but this would be a real pain to exclude all IPs but the ones I use.

I know a friend has a DLink AP that can set certain MAC addresses that are allowed onto the network and are allowed to surf but I was wondering if this is actually an option with the WAP11 or not.

Yes ... I did RTFM

Thorn · 05-23-2002

Quote:

Originally posted by acidrayne
...

Yes ... I did RTFM

Never doubted you would, Rayne.

On my WAP11, the list acts as an Allowed list, not an exclution list. Only MACs for machines I want to get through the AP from the wireless side are on that list. Works just fine. MACs on the list get a wireless connection; those not on the list, do not get a connection.

blackwave · 05-23-2002

Quote:

Originally posted by Thorn

Never doubted you would, Rayne.

On my WAP11, the list acts as anAllowed list, not an exclution list. Only MACs for machines I want to get through the AP from the wireless side are on that list. Works just fine. MACs on the list get a wireless connection; those not on the list, do not get a connection.

Thorn ,
Have you tried spoofing the mac on a machine that is not supposed to have access (rather this stamped mac is not the on the list), and then able to get access with this 'unauthorized' card?

Thorn · 05-23-2002

No, I've never tried spoofing it.

I know that it's a possiblity, but it's just not been a priority. My location tends to preclude anyone attacking my network on the wireless side. Not saying it couldn't happen, but it's lower down the list than getting hacked on the wired side.

One of these days I may try it to see if the WAP11 can see a difference between a real MAC and a spoofed one using the same number.

Cheers,

acidrayne · 05-23-2002

Quote:

Originally posted by Thorn

Never doubted you would, Rayne.

On my WAP11, the list acts as an Allowed list, not an exclution list. Only MACs for machines I want to get through the AP from the wireless side are on that list. Works just fine. MACs on the list get a wireless connection; those not on the list, do not get a connection.

This is odd then ... If I add the MAC of ... shall we call it "Laptop A" to the list and then apply ... Laptop A can get online but "Laptop B" which is not on the list can still get online and vice versa

Do I need to reboot the router or either of the machines for these changes to take affect?

acidrayne · 05-23-2002

Just another thought ... I have a wired router and a wireless router ... the wired is .5 and the wireless is .6 and then my desktop pc is .2 ... I have my Gateway set as .5 and my DNS as .5 & .2

Would this bypass the MAC filtering?

Thorn · 05-23-2002

It shouldn't, if you have it the way I think you do. But can you post a drawing of the LAN wired and wireless? It might help.

Is everything set to Infrastructure mode? I'm thinking perhaps that Laptop A passing packets for Laptop B somehow if you're in Ad-Hoc mode. I would think it would, but you never know.

Also, as you just running TCP/IP or do you have other protocols turned on? Some protocols do funny things. Get the LAN down to the basics.

acidrayne · 05-23-2002

Quote:

Originally posted by Thorn
It shouldn't, if you have it the way I think you do. But can you post a drawing of the LAN wired and wireless? It might help.

Is everything set to Infrastructure mode? I'm thinking perhaps that Laptop A passing packets for Laptop B somehow if you're in Ad-Hoc mode. I would think it would, but you never know.

Also, as you just running TCP/IP or do you have other protocols turned on? Some protocols do funny things. Get the LAN down to the basics.

I do have everything set to Infrastructure mode. I also tried setting my gateway to .6 and I was not actually able to get online for a while but I had my MAC in the filtering section ... I think this was some wierd thing. Either way ... I am just running TCP/IP ... no IPX or NetBEUI

Here are some images you might find interesting.

Quote:

You can also filter users by entering their physical address. Click the "Edit MAC Filter Setting" button and enter the MAC addresses that you want to filter into the MAC address fields. The users who use those MAC addresses will not be able to access the Internet.

acidrayne · 05-23-2002

Just a pic of the help screen ... This is where the quote came from.

Thorn · 05-24-2002

Rayne,
What version of the WAP11 is this? Or is it the combined wireless & router? (Which isn't a WAP11, it is a BEFW11S4.)

I should clarify: The setting information I supplied was for the WAP11 v1.0 or v1.1, which is the original WAP11; no web interface, no routing. It has a SNMP control panel application, which has a totally different appearence than those images. The web interface above looks similar to the BEFSR41 router (I have one), so I'm assuming you have either either a WAP11 v2.x or the BEFW11S4.

In either case, I don't have either, so I'm afraid my information probably won't help.

Sorry,

acidrayne · 05-24-2002

You know Thorn ... I have realized I am a grand idiot ... I can't remember the model number on it right now as I am not near it, but it is the Wireless AP/Router/Switch ... I would imagine this would be the BEFW11S4.

At the time I posted I think my head was still in LALA land from Joe Blow Farmer in BFE who couldn't get his DSL to work after lightning hit his house and somehow thinks it's on our end.

I will double check and repost ... Thanks for the awakening.

acidrayne · 05-24-2002

Yep ... I just went to the Linksys sight and viewed the pic on the BEFW11S4 and I am a complete idiot.

The above screenshots are for the BEFW11S4.

<moron>

So here is my repost ... My name is Mr. Moron ... I have a BEFW11S4 Wireless Router/Switch

I would like to enable MAC filtering but am having some problems ... Can anyone tell me if this is possible with the model I actually have which is BEFW11S4 or if anyone has had experience with the BEFW11S4 and MAC filtering I would love to get some advice on the BEFW11S4.

THANKS!!

</moron>

* No Linksys WAP11 Wireless Access Points were harmed in the process of obtaining a Linksys BEFW11S4 Wireless Router/Switch.

Thorn · 05-24-2002

Quote:

Originally posted by acidrayne
* No Linksys WAP11 Wireless Access Points were harmed in the process of obtaining a Linksys BEFW11S4 Wireless Router/Switch.

I don't know... Sounds like a DSL modem got hurt...

Quote:

Originally posted by acidrayne
At the time I posted I think my head was still in LALA land from Joe Blow Farmer in BFE who couldn't get his DSL to work after lightning hit his house and somehow thinks it's on our end.

No problem, Rayne. I think there's been some reported problem with the BEFW11S4 and the MAC list. You might want to check DSL Reports. I may have seen it there.

Cheers,

acidrayne · 05-24-2002

Quote:

Originally posted by Thorn
No problem, Rayne. I think there's been some reported problem with the BEFW11S4 and the MAC list. You might want to check DSL Reports. I may have seen it there.

Thanks for the info ... will search it up.

acidrayne · 05-24-2002

Thanks for the info Thorn ... I believe I might be able to upgrade my firmware and that appears that it might do the trick.

From what I was reading on DSLReports it looks like the firmware was in Beta stage at the time but I am going to see if there is a final release on the linksys sight.

05-23-2002	#1 (permalink)
acidrayne Slacker Stumbler Join Date: May 2002 Location: Kansas Posts: 476	Linksys Mac Filtering I was wondering if someone could help me out with the MAC filtering for a Linksys WAP11 From what I see in the config it appears that the MAC Filtering on the filter tab is for excluding particular MAC addresses from accessing the AP or from accessing the internet connection. When I enter the mac of another pc on my network then that pc can still get online and everywhere on the network. When I put in my MAC I can still get everywhere on the network and online. I found that if I use the IP filtering that I can restrict internet access to particular ranges of IPs but this would be a real pain to exclude all IPs but the ones I use. I know a friend has a DLink AP that can set certain MAC addresses that are allowed onto the network and are allowed to surf but I was wondering if this is actually an option with the WAP11 or not. Yes ... I did RTFM __________________ Rayne

05-23-2002	#4 (permalink)
Thorn Did you do the math? Join Date: Apr 2002 Location: Villa Straylight Posts: 10,358	No, I've never tried spoofing it. I know that it's a possiblity, but it's just not been a priority. My location tends to preclude anyone attacking my network on the wireless side. Not saying it couldn't happen, but it's lower down the list than getting hacked on the wired side. One of these days I may try it to see if the WAP11 can see a difference between a real MAC and a spoofed one using the same number. Cheers, __________________ Thorn "Read Altas Shrugged. Compare it to today. Repeat as necessary"

05-23-2002	#6 (permalink)
acidrayne Slacker Stumbler Join Date: May 2002 Location: Kansas Posts: 476	Just another thought ... I have a wired router and a wireless router ... the wired is .5 and the wireless is .6 and then my desktop pc is .2 ... I have my Gateway set as .5 and my DNS as .5 & .2 Would this bypass the MAC filtering? __________________ Rayne

05-23-2002	#7 (permalink)
Thorn Did you do the math? Join Date: Apr 2002 Location: Villa Straylight Posts: 10,358	It shouldn't, if you have it the way I think you do. But can you post a drawing of the LAN wired and wireless? It might help. Is everything set to Infrastructure mode? I'm thinking perhaps that Laptop A passing packets for Laptop B somehow if you're in Ad-Hoc mode. I would think it would, but you never know. Also, as you just running TCP/IP or do you have other protocols turned on? Some protocols do funny things. Get the LAN down to the basics. __________________ Thorn "Read Altas Shrugged. Compare it to today. Repeat as necessary" Last edited by Thorn : 05-23-2002 at 07:45 PM.

05-24-2002	#10 (permalink)
Thorn Did you do the math? Join Date: Apr 2002 Location: Villa Straylight Posts: 10,358	Rayne, What version of the WAP11 is this? Or is it the combined wireless & router? (Which isn't a WAP11, it is a BEFW11S4.) I should clarify: The setting information I supplied was for the WAP11 v1.0 or v1.1, which is the original WAP11; no web interface, no routing. It has a SNMP control panel application, which has a totally different appearence than those images. The web interface above looks similar to the BEFSR41 router (I have one), so I'm assuming you have either either a WAP11 v2.x or the BEFW11S4. In either case, I don't have either, so I'm afraid my information probably won't help. Sorry, __________________ Thorn "Read Altas Shrugged. Compare it to today. Repeat as necessary"

05-24-2002	#11 (permalink)
acidrayne Slacker Stumbler Join Date: May 2002 Location: Kansas Posts: 476	You know Thorn ... I have realized I am a grand idiot ... I can't remember the model number on it right now as I am not near it, but it is the Wireless AP/Router/Switch ... I would imagine this would be the BEFW11S4. At the time I posted I think my head was still in LALA land from Joe Blow Farmer in BFE who couldn't get his DSL to work after lightning hit his house and somehow thinks it's on our end. I will double check and repost ... Thanks for the awakening. __________________ Rayne

05-24-2002	#12 (permalink)
acidrayne Slacker Stumbler Join Date: May 2002 Location: Kansas Posts: 476	Yep ... I just went to the Linksys sight and viewed the pic on the BEFW11S4 and I am a complete idiot. The above screenshots are for the BEFW11S4. <moron> So here is my repost ... My name is Mr. Moron ... I have a BEFW11S4 Wireless Router/Switch I would like to enable MAC filtering but am having some problems ... Can anyone tell me if this is possible with the model I actually have which is BEFW11S4 or if anyone has had experience with the BEFW11S4 and MAC filtering I would love to get some advice on the BEFW11S4. THANKS!! </moron> * No Linksys WAP11 Wireless Access Points were harmed in the process of obtaining a Linksys BEFW11S4 Wireless Router/Switch. __________________ Rayne

05-24-2002	#15 (permalink)
acidrayne Slacker Stumbler Join Date: May 2002 Location: Kansas Posts: 476	Thanks for the info Thorn ... I believe I might be able to upgrade my firmware and that appears that it might do the trick. From what I was reading on DSLReports it looks like the firmware was in Beta stage at the time but I am going to see if there is a final release on the linksys sight. __________________ Rayne

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode