0

My ISP provided ZyXEL C3000Z router. I'm trying to configure MAC filtering -- to permit only whitelisted addresses to connect.

After I added my 6th device (4 laptops -- 2 work issued, 2 personal, and 2 cell phones) I got this error:

Reach Maximum MACFilter Number

I'm amazed at this... in this day of smart appliances (TVs, coffee makers, garage door openers, thermostats, etc.) multiple mobile devices, game consoles, etc., that 6 devices would be a limit.

Does anyone know of an alternative modem/router which is more capable than the one I currently have?

... or any other implementations?

What I am NOT looking for is to turn this into a security-related motherhood discussion. Please don't reply with "MAC filtering isn't secure". I already understand some of that.

Replies targeted to the information in this post are greatly appreciated.

  • 2
    Just so you know, "MAC Whitelisting as well as Blacklisting are pretty much useless for security" and just becomes an administrative annoyance... It's amusing that the equipment can't do it properly, but I wouldn't recommend you look to do it in the first place. You understand "some" of the "it's useless", but want to do it anyway? – Attie May 28 '19 at 21:49
  • Does your router support RADIUS authentication? en.wikipedia.org/wiki/RADIUS – Andy May 28 '19 at 23:25
  • @Attie... Just so you know, I did put in the post.... "Please don't reply with 'MAC filtering isn't secure'." Thanks for completely disregarding the question as written. – MGoBlue93 May 29 '19 at 22:11
  • @Andy . It does not. As I poke around the web interface more, I see this modem/router doesn't support much. Thanks for the reply :) – MGoBlue93 May 29 '19 at 22:12
  • 1
    What is a “…security-related motherhood discussion.”? – Giacomo1968 May 30 '19 at 14:48
1

I’ve assumed here that you are looking to provide a small modicum of protection against computer illiterate people accessing your Internet below.


Either get another ethernet router to sit between the Zyxel and your systems (I’d recommend something that can take DD-WRT and bypass this kind of MAC filtering crap) or find an alternative solution which does not use MAC address whitelisting.

One such solution might be to abandon DHCP and use static IPs hidden somewhere in the 10.0.0.0/8 network.

Alternatively—and it may not be possible on your router—use static DHCP assignments to handle valid systems/MAC addresses and assign out if a non-routed pool for everything else.

| improve this answer | |
  • Just a comment: But are you feeling okay, @DavidGo? Your typos here were pretty strange. – Giacomo1968 May 29 '19 at 0:29
  • 1
    @jakegould Sorry. My cellphone keyboard is not great, and I must have forgotten to check for typos! – davidgo May 29 '19 at 0:36
  • @JakeGould.... I was thinking about doing exactly that. One of the reasons why I posted is I was wondering if that would have an effect upon performance. Thanks! – MGoBlue93 May 30 '19 at 5:13
  • Performance difference would not be perceivable unless you are a professional gamer - and even then probably not if you have decent hardware. My ASUS RT-AC68U increases latency by about 0.5ms. Throughput should not be affected either. – davidgo May 30 '19 at 5:34
  • @MGoBlue93 I don’t post this answer. davidgo did. – Giacomo1968 May 30 '19 at 13:56
0

You should check your router/modem firmware has the latest update. When logged into router go to utilities tab/icon, 3rd one down is Upgrade Firmware.

When I got my C3000Z it was due for a firmware upgrade.

| improve this answer | |
  • If you have a new question, please ask it by clicking the Ask Question button. Include a link to this question if it helps provide context. - From Review – music2myear Apr 2 at 3:30
  • @music2myear I interpret this answer as serious advice about upgrading the router, not as another irrelevant question. – karel Apr 2 at 4:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.