MAC filtering with RT-AC66R

[Solara]

OK guys I think I need some help. I MAC filter due to additional security concerns. The issue I have noticed is that another user can access my private network using a wireless connection providing they know the WPA-2 password. I never had this problem when using my D-link DIR-655. Surely only MAC addresses in the list should have access and all others would be denied even if you know the password. Any ideas?? I really need this feature to work correctly.

 

[L&LD]

As usual: need much more information.

What firmware? What are they connecting to (guest or main ssid)?


In the end though; they must be just spoofing the MAC address - just too simple to do as this is built into almost every O/S and router for a very long time now.

MAC filters are not security - not giving out the WPA2 password is.

 

[Solara]

Sorry about that firmware is from Merlin Build 3.0.0.4.374.39.0. It is the main network not the public one. No one is spoofing the MAC address it is just me testing it. In the past on D-Link it has denied a user access even if they know the WPA-2 password providing their MAC address is NOT in the MAC filter table. In my case the MAC address was not an authorized one in the MAC list. I am aware that MAC filtering doesn't keep PC savvy folks out. Think most of the people in my neighborhood aren't that PC savvy tho. Or at least I hope not Thanks for your assistance.

 

[L&LD]

Sorry, answering this very late:

Did you try rebooting both the Router and the computer in question?

It should be 'secure' then.

 

[Solara]

Yes I did. Both the router and the laptop I was resting with. I wonder if Merlin could help. I can understand that the user can log into the public wireless network without any issues. However the MAC filtering is designed to keep out any unauthorized MAC addresses from the main private network. That would be wired or wireless. If I am incorrect I would appreciate anyone that can correct me.

 

[L&LD]

Are you sure you've blocked both the wired and wireless MAC's of the laptop in question? They are different for the wired Ethernet and the wireless connections.

 

[Solara]

I'll verify that tonight. It is possible I missed it. I am reading between the lines and are you saying that I should have device specified in both wired and wireless MAC security? Thanks for the pointer.

 

[Adamm]

Don't get me wrong, but isn't the real solution here to change your WPA2-AES password?

MAC Filtering is very easy to bypass and hardly a "security measure" as someone can sniff out a valid mac and spoof it.