MAC Filtering in Computer Network
Last Updated :
16 Apr, 2023
There are two kinds of network Adapters. A wired adapter allows us to set up a connection to a modem or router via Ethernet in a computer whereas a wireless adapter identifies and connects to remote hot spots. Each adapter has a distinct label known as a MAC address which recognizes and authenticates the computer. Mac address is shown in the format of 00:00:00:00:00:00 or 00-00-00-00-00-00.
About and working:
MAC filtering is a security method based on access control. In this, each address is assigned a 48-bit address which is used to determine whether we can access a network or not. It helps in listing a set of allowed devices that you need on your Wi-Fi and the list of denied devices that you don’t want on your Wi-Fi. It helps in preventing unwanted access to the network. In a way, we can deny list or allow a list of certain computers based on their MAC address. We can configure the filter to allow connection only to those devices included in the white list. White lists provide greater security than denied lists because the router grants access only to selected devices.
It is used on enterprise wireless networks having multiple access points to prevent clients from communicating with each other. The access point can be configured to only allow clients to talk to the default gateway, but not other wireless clients. It increases the efficiency of access to a network
The router allows configuring a list of allowed MAC addresses in its web interface, allowing you to choose which devices can connect to your network. The router has a number of functions designed to improve the security of the network but not all are useful. Media access control may seem advantageous but there are certain flaws.
On a wireless network, the device with the proper credentials such as SSID and password can authenticate with the router and join the network which gets an IP address and access to the internet and any shared resources.
MAC address filtering adds an extra layer of security that checks the device's MAC address against a list of agreed addresses. If the client's address matches one on the router's list, access is granted otherwise it doesn’t join the network.
Steps for Mac filtering -
- Set a list of allowed devices. Only those MAC addresses which are on the list will be provided services by the DHCP.
- Set a list of denied devices. The MAC addresses which are on the denied list will not be granted server by DHCP.
- If the MAC address is on both the allowed and denied list then it will be denied the service.
For enabling a list of allowed, denied or both devices follow the steps given below.
- Go to the DHCP console, right-click the IPv4 node, and click properties.
- Use the current filter configuration details on the filter tab and use an allow list by selecting enable allow list and use a denied list by selecting enable deny list.
- Click OK and save changes.
Updating Mac filtering:
Note that if MAC Filtering is enabled on a wireless router and the MAC address is not entered then the wireless device connected to the router will not be able to connect
We do not need to enable MAC Filtering if this is already disabled for troubleshooting purposes. Router manufacturers are more knowledgeable in this field.
What to Do -
- Go to your router settings.
In the router’s settings locate the tab or setting "MAC Filtering." This is found within a router's "Wireless" or "Wireless Security" options. In some routers, MAC Filtering may also be referred to as "MAC Address Control, "" Address Reservation, " or "Wireless MAC Authentication." - One needs to add the Nintendo system's MAC Address to the list of allowed devices and save or apply this change if MAC Filtering is on or enabled. If you do not want MAC Filtering on for your network turn it off or disable it.
Note - You can enable the MAC filter on a Linksys Wireless-N router through the Wireless > Wireless MAC Filter page. We can do this on NETGEAR routers through ADVANCED > Security > Access Control and on D-Link routers through ADVANCED > NETWORK FILTER.S
applications of MAC filtering in computer networks:
- Access control: MAC filtering can be used to restrict access to a network by only allowing devices with authorized MAC addresses to connect. This can help prevent unauthorized access to the network and improve network security.
- Parental controls: MAC filtering can be used by parents to restrict access to the internet for their children by allowing only specific devices to connect to the network.
- BYOD policies: MAC filtering can be used to implement Bring Your Own Device (BYOD) policies in organizations. By allowing only authorized devices to connect to the network, organizations can ensure that only approved devices are used to access corporate resources.
- Guest access: MAC filtering can be used to provide guest access to a network by allowing only specific devices to connect. This can help improve security and prevent unauthorized access to the network.
- Wireless networks: MAC filtering can be used to secure wireless networks by allowing only authorized devices to connect to the network. This can help prevent unauthorized access to the network and protect sensitive data.
- Network monitoring: MAC filtering can be used to monitor network traffic by allowing only specific devices to connect and tracking their activity on the network.
- Compliance: MAC filtering can be used to enforce compliance with security policies and regulations by ensuring that only authorized devices are allowed to connect to the network.
- Traffic management: MAC filtering can be used to manage network traffic by limiting the number of devices that are allowed to connect to the network at any given time.
- Troubleshooting: MAC filtering can be used to troubleshoot network connectivity issues by identifying unauthorized devices that may be causing problems on the network.
- Remote management: MAC filtering can be used to provide remote management capabilities for network devices by allowing only specific devices to connect to the network and access network resources.
- IoT device security: MAC filtering can be used to secure Internet of Things (IoT) devices by allowing only authorized devices to connect to the network and access IoT resources.
Drawbacks:
- It is time-consuming and tedious especially if you have a lot of Wi-Fi-enabled devices as you will need to get the MAC to address every device. The list of allowed devices should be modified whenever we want to purchase a new computer or mobile device or whenever we want to grant permission to a new device.
- Two MAC addresses should be added for the PCs one being the wired adapter and one being the wireless adapter.
- It won’t protect against hackers who know what they are doing. But you can use it for kids to disallow access as they don’t have adequate knowledge.
- It can make the network less secure because now the hacker doesn’t have to crack your WPA2-encrypted password at all.
- Limited effectiveness: MAC filtering is not foolproof and can be easily bypassed by experienced hackers who can spoof or change their MAC addresses. Additionally, some devices may allow users to change their MAC addresses, making it difficult to control network access.
- Compatibility issues: Some devices may not be compatible with MAC filtering or may have issues connecting to the network if their MAC address is not properly configured. This can cause connectivity issues and may require additional troubleshooting.
- Increased network management complexity: Maintaining a list of authorized MAC addresses can be time-consuming and difficult to manage, especially for larger networks with many devices. Additionally, it can be challenging to identify and remove unauthorized devices from the network.
- False sense of security: Relying solely on MAC filtering can give a false sense of security as it is just one layer of network security. It is important to also use other security measures such as encryption, strong passwords, and firewalls to protect the network from threats.
Security -
By examining the packet using Wireshark hackers with a toolset like Kali Linux can access the network as they can get the MAC address of allowed devices and then they can change their device’s MAC address to the allowed MAC address and connect posing as that device. They can use “deauth”or “deassoc” attack that forcefully disconnects a device from a Wi-Fi network or use airplay-ng to send disassociation packets to the clients and then connect in the device’s place. However, MAC addresses of wireless clients can't truly be changed because they're encoded in the hardware. But some critics spotted that MAC addresses can be faked. All an attacker needs to do is to know one of the valid addresses. They don’t have to break the encryption to access your network or crack your WPA2 encrypted password. They just have to pretend to be a trusted computer.
MAC filtering will prevent average hackers from gaining network access. Most computer users don’t know how to trick their MAC address let alone find a router's list of approved addresses. Unlike domain filter, they do not stop traffic from flowing through the network.
A general doubt that arises is how the hackers can get our MAC address if they can’t connect to the network. It is a weakness of Wi-Fi that even if there is a WPA2 encrypted network, the MAC addresses on those packets are not encrypted. This means that anyone with network sniffing software installed and a wireless card in a range of your network can easily grab all the MAC addresses that are communicating with your router.
Other solutions to the problem -
- A better solution to control outsiders who want to connect to your network is to use a guest Wi-Fi network. It will allow them to let others connect to your network, but not let them see anything on your home network. You can purchase a cheap router and attach it to your network with a separate password and separate IP address range to do this.
- WPA2 encryption is sufficient as it is very difficult to crack. But the key is to have a strong and long password. If someone cracks your WPA2 encryption they don’t have to make the effort to trick MAC filtering. If an attacker is confused by MAC address filtering they won’t be able to break your encryption.
Does MAC Address Separate Further develop Organization Security?
Hypothetically, the probability of halting pernicious organization action increments when a switch really looks at this association prior to conceding gadgets. Yet, by dissecting the parcel utilizing Wireshark, programmers utilizing a toolset, for example, Kali Linux can get to the organization since they can get the Macintosh locations of supported gadgets, then, at that point, the aggressor can change its gadget's Macintosh address to the permitted Macintosh address and interface by taking on the appearance of that gadget. They can utilize the "deauth" or "deassoc" assaults, which powerfully segregate a gadget from a Wi-Fi organization, or they can use airplay-ng, which sends disassociation bundles to clients and afterward interfaces in the gadget's place.
Then again, the Macintosh locations of remote clients can't be changed on the grounds that they are encoded in the equipment. Notwithstanding, a few pundits have brought up that Macintosh locations can be manufactured. An aggressor just needs to know one of the real locations. They don't have to break the encryption or break your WPA2 scrambled secret phrase to get sufficiently close to your organization. The assailants need to act like a confided in PC.
A typical inquiry emerges to you that how these programmers got our Macintosh address assuming that they couldn't interface with the organization. Regardless of whether there is a WPA2 scrambled network, the Macintosh tends to on those bundles are not encoded. This implies that anybody having network sniffing programming and a remote card close enough to your organization can undoubtedly catch all of the Macintosh tends to converse with your switch.
Similar Reads
Computer Network Tutorial A Computer Network is a system where two or more devices are linked together to share data, resources and information. These networks can range from simple setups, like connecting two devices in your home, to massive global systems, like the Internet. Below are the main components of a computer netw
7 min read
Computer Network Basics
Basics of Computer NetworkingA computer network is a collection of interconnected devices that share resources and information. These devices can include computers, servers, printers, and other hardware. Networks allow for the efficient exchange of data, enabling various applications such as email, file sharing, and internet br
14 min read
Types of Computer NetworksA computer network is a system that connects many independent computers to share information (data) and resources. The integration of computers and other different devices allows users to communicate more easily. It is a collection of two or more computer systems that are linked together. A network
11 min read
Introduction to InternetComputers and their structures are tough to approach, and it is made even extra tough when you want to recognize phrases associated with the difficulty this is already utilized in regular English, Network, and the net will appear to be absolutely wonderful from one some other, however, they may seem
10 min read
Types of Network TopologyNetwork topology refers to the arrangement of different elements like nodes, links, or devices in a computer network. Common types of network topology include bus, star, ring, mesh, and tree topologies, each with its advantages and disadvantages. In this article, we will discuss different types of n
12 min read
Network Devices (Hub, Repeater, Bridge, Switch, Router, Gateways and Brouter)Network devices are physical devices that allow hardware on a computer network to communicate and interact with each other. Network devices like hubs, repeaters, bridges, switches, routers, gateways, and brouter help manage and direct data flow in a network. They ensure efficient communication betwe
9 min read
What is OSI Model? - Layers of OSI ModelThe OSI (Open Systems Interconnection) Model is a set of rules that explains how different computer systems communicate over a network. OSI Model was developed by the International Organization for Standardization (ISO). The OSI Model consists of 7 layers and each layer has specific functions and re
13 min read
TCP/IP ModelThe TCP/IP model (Transmission Control Protocol/Internet Protocol) is a four-layer networking framework that enables reliable communication between devices over interconnected networks. It provides a standardized set of protocols for transmitting data across interconnected networks, ensuring efficie
7 min read
Difference Between OSI Model and TCP/IP ModelData communication is a process or act in which we can send or receive data. Understanding the fundamental structures of networking is crucial for anyone working with computer systems and communication. For data communication two models are available, the OSI (Open Systems Interconnection) Model, an
5 min read
Physical Layer
Physical Layer in OSI ModelThe physical Layer is the bottom-most layer in the Open System Interconnection (OSI) Model which is a physical and electrical representation of the system. It consists of various network components such as power plugs, connectors, receivers, cable types, etc. The physical layer sends data bits from
4 min read
Types of Network TopologyNetwork topology refers to the arrangement of different elements like nodes, links, or devices in a computer network. Common types of network topology include bus, star, ring, mesh, and tree topologies, each with its advantages and disadvantages. In this article, we will discuss different types of n
12 min read
Transmission Modes in Computer Networks (Simplex, Half-Duplex and Full-Duplex)Transmission modes also known as communication modes, are methods of transferring data between devices on buses and networks designed to facilitate communication. They are classified into three types: Simplex Mode, Half-Duplex Mode, and Full-Duplex Mode. In this article, we will discuss Transmission
6 min read
Types of Transmission MediaTransmission media is the physical medium through which data is transmitted from one device to another within a network. These media can be wired or wireless. The choice of medium depends on factors like distance, speed, and interference. In this article, we will discuss the transmission media. In t
9 min read
Data Link Layer
Data Link Layer in OSI ModelThe data link layer is the second layer from the bottom in the OSI (Open System Interconnection) network architecture model. It is responsible for the node-to-node delivery of data within the same local network. Its major role is to ensure error-free transmission of information. DLL is also responsi
5 min read
What is Switching?Switching is the process of transferring data packets from one device to another in a network, or from one network to another, using specific devices called switches. A computer user experiences switching all the time for example, accessing the Internet from your computer device, whenever a user req
5 min read
Virtual LAN (VLAN)Virtual LAN (VLAN) is a concept in which we can divide the devices logically on layer 2 (data link layer). Generally, layer 3 devices divide the broadcast domain but the broadcast domain can be divided by switches using the concept of VLAN. A broadcast domain is a network segment in which if a devic
7 min read
Framing in Data Link LayerFrames are the units of digital transmission, particularly in computer networks and telecommunications. Frames are comparable to the packets of energy called photons in the case of light energy. Frame is continuously used in Time Division Multiplexing process. Framing is a point-to-point connection
6 min read
Error Control in Data Link LayerData-link layer uses the techniques of error control simply to ensure and confirm that all the data frames or packets, i.e. bit streams of data, are transmitted or transferred from sender to receiver with certain accuracy. Using or providing error control at this data link layer is an optimization,
4 min read
Flow Control in Data Link LayerFlow control is design issue at Data Link Layer. It is a technique that generally observes the proper flow of data from sender to receiver. It is very essential because it is possible for sender to transmit data or information at very fast rate and hence receiver can receive this information and pro
4 min read
Piggybacking in Computer NetworksPiggybacking is the technique of delaying outgoing acknowledgment temporarily and attaching it to the next data packet. When a data frame arrives, the receiver waits and does not send the control frame (acknowledgment) back immediately. The receiver waits until its network layer moves to the next da
5 min read
Network Layer
Network Layer in OSI ModelThe Network Layer is the 5th Layer from the top and the 3rd layer from the Bottom of the OSI Model. It is one of the most important layers which plays a key role in data transmission. The main job of this layer is to maintain the quality of the data and pass and transmit it from its source to its de
5 min read
Introduction of Classful IP AddressingAn IP address is an address that has information about how to reach a specific host, especially outside the LAN. An IP address is a 32-bit unique address having an address space of 232.Classful IP addressing is a way of organizing and managing IP addresses, which are used to identify devices on a ne
11 min read
Classless Addressing in IP AddressingThe Network address identifies a network on the internet. Using this, we can find a range of addresses in the network and total possible number of hosts in the network. Mask is a 32-bit binary number that gives the network address in the address block when AND operation is bitwise applied on the mas
7 min read
What is an IP Address?Imagine every device on the internet as a house. For you to send a letter to a friend living in one of these houses, you need their home address. In the digital world, this home address is what we call an IP (Internet Protocol) Address. It's a unique string of numbers separated by periods (IPv4) or
14 min read
IPv4 Datagram HeaderIP stands for Internet Protocol and v4 stands for Version Four (IPv4). IPv4 was the primary version brought into action for production within the ARPANET in 1983. IP version four addresses are 32-bit integers which will be expressed in decimal notation. In this article, we will discuss about IPv4 da
4 min read
Difference Between IPv4 and IPv6In the digital world, where billions of devices connect and communicate, Internet Protocol (IP) Addresses play a crucial role. These addresses are what allow devices to identify and locate each other on a network.To know all about IP Addresses - refer to What is an IP Address?Currently, there are tw
9 min read
Difference between Private and Public IP addressesIP Address or Internet Protocol Address is a type of address that is required to communicate one computer with another computer for exchanging information, file, webpage, etc. Public and Private IP address are two important parts of device identity. In this article, we will see the differences betwe
6 min read
Introduction To SubnettingSubnetting is the process of dividing a large network into smaller networks called "subnets." Subnets provide each group of devices with their own space to communicate, which ultimately helps the network to work easily. This also boosts security and makes it easier to manage the network, as each sub
8 min read
What is Routing?The process of choosing a path across one or more networks is known as Network Routing. Nowadays, individuals are more connected on the internet and hence, the need to use Routing Communication is essential.Routing chooses the routes along which Internet Protocol (IP) packets get from their source t
10 min read
Network Layer ProtocolsNetwork Layer is responsible for the transmission of data or communication from one host to another host connected in a network. Rather than describing how data is transferred, it implements the technique for efficient transmission. In order to provide efficient communication protocols are used at t
9 min read
Transport Layer
Session Layer & Presentation Layer
Session Layer in OSI modelThe Session Layer is the 5th layer in the Open System Interconnection (OSI) model which plays an important role in controlling the dialogues (connections) between computers. This layer is responsible for setting up, coordinating, and terminating conversations, exchanges, and dialogues between the ap
6 min read
Presentation Layer in OSI modelPresentation Layer is the 6th layer in the Open System Interconnection (OSI) model. This layer is also known as Translation layer, as this layer serves as a data translator for the network. The data which this layer receives from the Application Layer is extracted and manipulated here as per the req
4 min read
Secure Socket Layer (SSL)SSL or Secure Sockets Layer, is an Internet security protocol that encrypts data to keep it safe. It was created by Netscape in 1995 to ensure privacy, authentication, and data integrity in online communications. SSL is the older version of what we now call TLS (Transport Layer Security).Websites us
10 min read
PPTP Full Form - Point-to-Point Tunneling ProtocolPPTP Stands for Point-to-Point Tunneling Protocol is a widely used networking protocol designed to create a secure private connection over a public network like the internet. It is Developed by Microsoft and other tech companies in the 1990s It is one of the first protocols used for Virtual Private
5 min read
Multipurpose Internet Mail Extension (MIME) ProtocolMIME (Multipurpose Internet Mail Extensions) is a standard used to extend the format of email messages, allowing them to include more than just text. It enables the transmission of multimedia content such as images, audio, video, and attachments, within email messages, as well as other types of cont
4 min read
Application Layer
Application Layer in OSI ModelThe Application Layer of OSI (Open System Interconnection) model, is the top layer in this model and takes care of network communication. The application layer provides the functionality to send and receive data from users. It acts as the interface between the user and the application. The applicati
5 min read
Client-Server ModelThe Client-Server Model is a distributed application architecture that divides tasks or workloads between servers (providers of resources or services) and clients (requesters of those services). In this model, a client sends a request to a server for data, which is typically processed on the server
6 min read
World Wide Web (WWW)The World Wide Web (WWW), often called the Web, is a system of interconnected webpages and information that you can access using the Internet. It was created to help people share and find information easily, using links that connect different pages together. The Web allows us to browse websites, wat
6 min read
Introduction to Electronic MailIntroduction:Electronic mail, commonly known as email, is a method of exchanging messages over the internet. Here are the basics of email:An email address: This is a unique identifier for each user, typically in the format of [email protected] email client: This is a software program used to send,
4 min read
What is a Content Distribution Network and how does it work?Over the last few years, there has been a huge increase in the number of Internet users. YouTube alone has 2 Billion users worldwide, while Netflix has over 160 million users. Streaming content to such a wide demographic of users is no easy task. One can think that a straightforward approach to this
4 min read
Protocols in Application LayerThe Application Layer is the topmost layer in the Open System Interconnection (OSI) model. This layer provides several ways for manipulating the data which enables any type of user to access the network with ease. The Application Layer interface directly interacts with the application and provides c
7 min read
Advanced Topics
What is Network Security?Every company or organization that handles a large amount of data, has a degree of solutions against many cyber threats. This is a broad, all-encompassing phrase that covers software and hardware solutions, as well as procedures, guidelines, and setups for network usage, accessibility, and general t
10 min read
Computer Network | Quality of Service and MultimediaQuality of Service (QoS) is an important concept, particularly when working with multimedia applications. Multimedia applications, such as video conferencing, streaming services, and VoIP (Voice over IP), require certain bandwidth, latency, jitter, and packet loss parameters. QoS methods help ensure
7 min read
Authentication in Computer NetworkPrerequisite - Authentication and Authorization Authentication is the process of verifying the identity of a user or information. User authentication is the process of verifying the identity of a user when that user logs in to a computer system. There are different types of authentication systems wh
4 min read
Encryption, Its Algorithms And Its FutureEncryption plays a vital role in today’s digital world, serving a major role in modern cyber security. It involves converting plain text into cipher text, ensuring that sensitive information remains secure from unauthorized access. By making data unreadable to unauthorized parties, encryption helps
10 min read
Introduction of Firewall in Computer NetworkA firewall is a network security device either hardware or software-based which monitors all incoming and outgoing traffic and based on a defined set of security rules it accepts, rejects, or drops that specific traffic. It acts like a security guard that helps keep your digital world safe from unwa
10 min read
MAC Filtering in Computer NetworkThere are two kinds of network Adapters. A wired adapter allows us to set up a connection to a modem or router via Ethernet in a computer whereas a wireless adapter identifies and connects to remote hot spots. Each adapter has a distinct label known as a MAC address which recognizes and authenticate
10 min read
Wi-Fi Standards ExplainedWi-Fi stands for Wireless Fidelity, and it is developed by an organization called IEEE (Institute of Electrical and Electronics Engineers) they set standards for the Wi-Fi system. Each Wi-Fi network standard has two parameters : Speed - This is the data transfer rate of the network measured in Mbps
4 min read
What is Bluetooth?Bluetooth is used for short-range wireless voice and data communication. It is a Wireless Personal Area Network (WPAN) technology and is used for data communications over smaller distances. This generation changed into being invented via Ericson in 1994. It operates within the unlicensed, business,
6 min read
Generations of wireless communicationWe have made very huge improvements in wireless communication and have expanded the capabilities of our wireless communication system. We all have seen various generations in our life. Let's discuss them one by one. 0th Generation: Pre-cell phone mobile telephony technology, such as radio telephones
2 min read
Cloud NetworkingCloud Networking is a service or science in which a company’s networking procedure is hosted on a public or private cloud. Cloud Computing is source management in which more than one computing resources share an identical platform and customers are additionally enabled to get entry to these resource
11 min read
Practice
Top 50 Plus Networking Interview Questions and Answers for 2024Networking is defined as connected devices that may exchange data or information and share resources. A computer network connects computers to exchange data via a communication media. Computer networking is the most often asked question at leading organizations such Cisco, Accenture, Uber, Airbnb, G
15+ min read
Top 50 TCP/IP Interview Questions and Answers 2025Understanding TCP/IP is essential for anyone working in IT or networking. It's a fundamental part of how the internet and most networks operate. Whether you're just starting or you're looking to move up in your career, knowing TCP/IP inside and out can really give you an edge.In this interview prepa
15+ min read
Top 50 IP Addressing Interview Questions and AnswersIn today’s digital age, every device connected to the internet relies on a unique identifier called an IP Address. If you’re aiming for a career in IT or networking, mastering the concept of IP addresses is crucial. In this engaging blog post, we’ll explore the most commonly asked IP address intervi
15+ min read
Last Minute Notes for Computer NetworksComputer Networks is an important subject in the GATE Computer Science syllabus. It encompasses fundamental concepts like Network Models, Routing Algorithms, Congestion Control, TCP/IP Protocol Suite, and Network Security. These topics are essential for understanding how data is transmitted, managed
14 min read
Computer Network - Cheat SheetA computer network is an interconnected computing device that can exchange data and share resources. These connected devices use a set of rules called communication protocols to transfer information over physical or wireless technology. Modern networks offer more than just connectivity. Enterprises
15+ min read