I've read in several places that the RE220 uses MAC proxying and virtual MACs for clients communicating through the extender. But for my recently purchased unit, the MACs reported on my router are all the same for the extender and the clients. I can manage MAC filtering on the extender using the white and black lists, but to pass the IP addresses of the clients through the extender requires that I turn off MAC filtering on the router (multiple IP addresses on one MAC are not accepted). Turning off MAC filtering on my router compromises security.

My understanding is that the "proxy" mode for TP-Link extenders is supposed to show a unique (and different from the physical one) MAC for each client. If that were the case, I don't think I would have the problem I'm seeing.

Can someone explain to me how reporting one MAC for all extender clients is useful?