Security's "Access Control" Function only blocks Internet Access for WIRED device
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
I just noticed this behavior. The WIRED device still can access another wired Win10 server's file sharing folders. Only the internet access is blocked.
So it does not look like the expected behavior that wired device not listed in White List should be totally blocked from accessing LAN network.
If the MAC address filtering settings are set into Broadcom BCM53134 switching IC, this behavior should not happen. :)
OK. I got it. This [Access Control] function is not equal to [MAC Filtering]. As a result, any wired & whitelisted wireless devices still can communicate with each other within the LAN. :p
The following wording is probably the reason why I got it misunderstood.
Hi Kevin,
From my usage experience with Buffalo / Netgear WiFi routers, the access control often means (wireless) MAC Filtering.
With Buffalo AC1750DHP + DD-wrt FW @ router mode, it only provides the first 5G wireless (wl0) and the first 2.4G wireless (wl1) interfaces MAC filtering options separately.
With Netgear R7000 + factory FW @ AP mode(the same chipset as above), its functionality is actually wireless device's MAC filtering only. The traffic sent among the wired ports are NOT blocked at all.
On AX90 V1 it is truly MAC address filtering for wireless devices, but obviously not for wired one. According to your suggested wording, it cannot explain why any of wired devices connected to this LAN and NOT listed on the whitelist still can communicate with each other. :p
I don't know if it is due to AX90 HW design to result in such behavior. Can you confirm if the following diagram is AX90 V1's chipset connecting topology? If so, it is somewhat more complex to implement wired port's MAC address filtering.
ps: In my case, WAN(1G) port is connected to VDSL modem, and LAN(2.5G) port is connected to my server.
Now I can confirm this device's topology is like the above diagram instead of the following one because concurrent of two wired 1000BaseT devices to 2.5GBaseT wired one is still at 110 MB/s. One 1000BaseT wired and one 802.11ax to the 2.5GBaseT wire server can reach more than 200 MB/s throughput.
I think the HW topology is more like this due to the fact that BCM6755 only contains 1 RGMII/SGMII port and 1 GPHY port.
Unless there is 1 additional GPHY chip connected to BCM53134, it does not seem able to provide 2.5GBaseT port while it is still 1Gx2 link between BCM6755 and BCM53134.
