Business Community > Switches > VLAN MAC filtering or other solution
< Switches

VLAN MAC filtering or other solution

VLAN MAC filtering or other solution

VLAN MAC filtering or other solution
VLAN MAC filtering or other solution
a week ago - last edited Thursday
Tags: #VLAN & Multi-Networks #MAC
Model: SG2016P  
Hardware Version: V1
Firmware Version: 1.20.4

Hi!

 

We have three IP cameras connected to our switch. I created a new VLAN for that and assigned the profile to each port. As the LAN ports are in open space, I would like to restrict the devices that can connect exactly to the MAC adresses of these three IP cams. But I can't find a VLAN MAC filtering option in the Omada controller. How can I achieve this or is there a better option?

 

In the user guide, its only shown for stand alone switches...

Thank you!

 

Br
Ronny

  0      
 
  0      
 
#1
Options
1 Accepted Solution
Re:VLAN MAC filtering or other solution-Solution
a week ago - last edited Thursday

Hi @sp00ky 

Thanks for posting in our business forum.

sp00ky wrote

@Clive_A Could you please elaborate a bit more what you mean with port security instead? Thank you!

 

Br
sp00ky

Port Security is mainly about the MAC address learning. You can configure a single MAC address and make it become the sole MAC that can connect to the Internet.

Layer 2 will verify the MAC address and ban unknown MAC address from connecting to the port to get IP(L3).

 

How to configure port security function

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
Recommended Solution
  2  
  2  
#4
Options
5 Reply
Re:VLAN MAC filtering or other solution
a week ago

Hi @sp00ky 

Thanks for posting in our business forum.

Try standalone, and use Port Security instead. It should outperform the MAC VLAN

 

MAC filter can work but requires much more work to set the MAC addresses.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  1  
  1  
#2
Options
Re:VLAN MAC filtering or other solution
a week ago

@Clive_A Could you please elaborate a bit more what you mean with port security instead? Thank you!

 

Br
sp00ky

  0  
  0  
#3
Options
Re:VLAN MAC filtering or other solution-Solution
a week ago - last edited Thursday

Hi @sp00ky 

Thanks for posting in our business forum.

sp00ky wrote

@Clive_A Could you please elaborate a bit more what you mean with port security instead? Thank you!

 

Br
sp00ky

Port Security is mainly about the MAC address learning. You can configure a single MAC address and make it become the sole MAC that can connect to the Internet.

Layer 2 will verify the MAC address and ban unknown MAC address from connecting to the port to get IP(L3).

 

How to configure port security function

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
Recommended Solution
  2  
  2  
#4
Options
Re:VLAN MAC filtering or other solution
a week ago

Thank you for the document, but how should I do that with SG2016P controlled by OC200?

I don't see these kind of options in the controller to assign exactly one MAC to a port on the switch... :-(

 

Br
sp00ky

 

  0  
  0  
#5
Options
Re:VLAN MAC filtering or other solution
a week ago

Hi @sp00ky 

Thanks for posting in our business forum.

sp00ky wrote

Thank you for the document, but how should I do that with SG2016P controlled by OC200?

I don't see these kind of options in the controller to assign exactly one MAC to a port on the switch... :-(

 

Br
sp00ky

 

 

In my first reply, I recommended if this is mandatory, consider the standalone mode.

It is not available in the controller. CLI in Controller mode cannot enable it as well.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  1  
  1  
#6
Options

Information

Helpful: 0

Views: 139

Replies: 5

Tags

VLAN & Multi-Networks
MAC
Related Articles
MAC VLAN
603 0
802.1X mac based authentication does not work
174 0
VLAN IP not being assigned
366 0
MAC FILTERING
3181 0
MAC Filtering problem
666 0
 MAC FIltering
441 0
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.