Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[beluptiga]

Hi...

I'm running into an issue on this router with MAC address filtering...

Firmware 1.12 and REV A1.

First, I don't use the DIR-825 as a Wireless or wired router but as an access point. The router is then wired to my local network and the gateway is a NETGEAR 3700 Router that does a marvelous job.

I'm trying to enable the MAC address filtering on the DIR-825 and, after entering the MAC address of the computer that I use to set the 825 up, and after saving the settings, I can't connect anymore with the same computer ! It seems that filtering is working because I try to connect to it with other wireless computer and the connection is denied...

Any help on this ? Can you let me know if the router has to be used as a true router instead of an access point to make the MAC address filtering to work ?

Thanks in advance for your help !

Marc

[user11]

maybe it wants the gateway/DHCP server router(Netgear) to handle the MAC filtering. who uses MAC filtering these days and what for? MAC filtering is weaker than WEP encryption. couple minutes and anyone with a lappy w/ pentest distro can scope out all associated MAC(s) then force them to reset while they spoof one and take it's spot on the network.

[beluptiga]

I use both... WPA2 and MAC filtering...

I have 2 other access point, a BELKIN N1 and an Apple Time Capsule and they both allow MAC filtering where plugged in the same router...

But the Dlink doesn't... It shows that I'm plugged on the network through the DIR 825 but not on the Internet...

Marc

[user11]

If you're using WPA2, why even use MAC filters? specially if a mix of so many router brands and you're having problems with something not needed. also there are 2 newer firmware releases available you may try even tho they do not specify adjustments to MAC filtering they do address HNAP and the buggy DNS-Relay. you have 4 wireless radios operating on the 2.4GHz band, causing channel overlap = interference.

But the Dlink doesn't... It shows that I'm plugged on the network through the DIR 825 but not on the Internet...

What do you mean network but not internet? That isn't a MAC filter issue, sounds like your network setup is wonky. The Belkin N1 has a AP simple config so no need to turn off DHCP, not sure how the Time Capsule setup works(must be using WDS as a repeater(which splits bandwidth in half). Using routers as APs you have to either have all SSIDs the same or different, wireless channels non overlapping(1,6,11), DHCP and UPnP turned off, ethernet cables must connect to the APs via the LAN ports not INTERNET ports, and each AP must have it's own IP in the router's subnet but outside of the DHCP pool. eg. rtr=192.168.0.1 ap1=192.168.0.2 ap2=192.168.0.3 ap3=192.168.0.4

[beluptiga]

THanks user11 for your reply...

What I wanted to say is that I'm able to see other computers on the network through the DIR-825 with MAC filtering on, but can't access the Internet. As soon as I turn the MAC filtering off, BINGO ; I'M able to access Internet.

Here's my complete set up :

MAIN ROUTER : Netgear Gigabit Router WNDR3700

Access Point :

DLINK DIR 825
Belkin N1
Apple Time Capsule

All with DHCP disable ; used as an access point only.

All 4 are set up with WPA2 Personal security with 10 digits password with AES or TKIP.

All those 3 access point are wired to the Home Network through CAT-6 cables and Netgear Gigabit switches 2x8 port switches) both plugged in the Netgear WNDR 3700.

The Apple Time Capsule, the Netgear WNDR 3700 and the Belkin Ni have all MAC address filtering enable and working flawlesly. Thay have a fixed IP address.

I can turn the MAC address filtering on in the DLINK DIR 825 but can't access the Internet, I can link to other computer on the network via the DLINK.

All 4 have different channel settings, either on the 2.4Ghz or the 5Ghz frequency. They can't overcross channels with interferences. THay also all have their own SSID according to the frequency (different broadcast names) and this works again flawlesly.

There is 12 computers (4 wired and 8 wireless) hook up on this network, 1 wireless printer and 2 wired printers, 2 iPod touch and 2 iPhones. And, with all the wireless stuff, I did enter the MAC address in each and everyone of the access point and router and I can access all of them without any issues, even with the MAC address filtering on.

Except the DIR 825 when MAC filtering is on. If it's off, no issues.

Thanks for your help !

Marc

[user11]

Then leave MAC filtering off? It provides absolutely zero benefit. Most likely linked to a similar thread here http://forums.dlink.com/index.php?topic=9974.0 which folks are having problems with the 825 not allowing clients, with MAC addresses that don't start with 00, to be added to the filter lists. Apparently the issue has been brought to the devs attention, but could this symptom you speak of be another bug in the functionality? Please update to the latest firmware, which seems to be surprisingly stable, and test for MAC filtering functionality even though best solution is to just simply turn it off because it is not needed. Newest firmware: ftp://ftp.dlink.com/Gateway/dir825/Firmware/dir825_firmware_113NA.zip

[beluptiga]

THanks... At the time that I was doing all the setup, only 1.12 was available...

I will surely upgrade and test... and let you know !

Marc

[beluptiga]

Confirmed...

After upgrading to 1.13NA, MAC address filtering doesn't work when the DIR-825 is used as an access point.

I don't know if it works when used as a DHCP router with MAC address filtering... If somebody know, please feel free to reply...

I even did enter the MAC address of the Dlink into my Netgear WNDR3700 router, on 2.4 and 5G and same issue...
All my 2 other access point which are the Belkin N1 and the Apple Time Capsule works without any issue on MAC filtering...

DLINK, can you help ?

Thanks !

[ceyx]

This post really isn't in all likelihood much help to Marc but . . . I just do not get why everyone seems to be hating on MAC filtering so hardcore.  I (and Marc too, I'd bet) am aware of its relative lack of security and vulnerability to spoofing.  That doesn't change the fact that it still enables me to give the password to my guest zone to my roommate without having every single one of his friends slowing down my network with their iPhascist drone-phones because they are either too cheap to use their own 3G or they for some inexplicable reason are not able to get a signal from my downtown location . . . in either case I would wonder why anyone would buy anything from Apple, let alone something only able to receive at&t service in the US . . . but I digress.  I suppose if this makes me stupid, well I guess I just am not all that paranoid about my home wireless network.  If any of these little boys need so desperately to spoof their phone's MAC, then bust thru the partition to the other frequency, and then go turn on my laptop, and then bust thru the BIOS password and then decipher my login password . . . well I think I made my point.  Realistically, if i was going to be so suspicious I may as well just keep my laptop and router safely behind a deadbolted door.  Oh wait, I do. 

Maybe it makes me more of a jerk than I otherwise would be, but I would much rather appear to be ignorant of why no one seems to be able to connect rather than be perceived as the paranoid jerk who will not share his big expensive fast connection with everyone else.  And anyone who's ever been drawn into such a discussion knows that it is like talking to a houseplant.  People who do not understand one's disinclination to have an open home network simply cannot be placated when they can't check their Facebook and you wind up insulting them with an "omg so you can't check your fb. FML."  I have the whole rest of my life to burn bridges.  For now, I love MAC filtering for I am but a simple man. LML.
 

[user11]

Marc has WPA2 enabled...MAC filtering provides what...if there is strong encryption already there? My point exactly!

[atom88]

DIR-825 with firmware 2.02NA is BUGGY for DHCP reservation by MAC address!

I just bought a brand new computer with an ASUS P5E3 PRO GB Ethernet built into the motherboard in it that won't work. 

It has an ethernet MAC address that starts with 90:36:.....  It won't work either on the DHCP server reservation list!

COME ON D-LINK!  FIX YOUR BUGGY SOFTWARE AND RELEASE A PATCH ASAP!

Why are you error checking for something other than a valid HEXADECIMAL string?  Surely you could release a patch of the firmware to solve this.  Perhaps there's a javascript function in the browser you're using to check this that could be faked out on the router's admin page?

It has a GigBit (1000 MB/sec) ethernet network card built into it.

It's based on the Marvell 88E8056 PCIe Gigbit LAN controller

The operating system has nothing to do with the MAC address (as that's a hardware issue).  Perhaps Ubuntu has something to spoof the MAC address?

I have a triple boot: Ubuntu 9.10 Karmic Koala, Windows 7, & Win XP 64-bit.

In Ubuntu I do: "lspci" from the command prompt and get this:
Ethernet controller: Marvell Technology Group Ltd. 88E8056 PCI-E Gigabit Ethernet Controller (rev 12)

[abm100]

D-Link is aware of the bug, and they latest beta BIOS has it fixed.  The link is at the top of the DIR-825 forum area.

[abm100]

I think it is this beta that has it fixed.

ftp://ftp.dlink.com/Gateway/dir825_revB/Beta/Firmware/dir825_revB_fw_202b01NA_beta02.zip

[atom88]

Okay, that is great that they have a fix for it.  When will it be out of BETA stage?  I hate being someone else's BETA tester.

[atom88]

I went to:
ftp://ftp.dlink.com/Gateway/dir825_revB/Beta/Firmware/

I also tried:
ftp://ftp.dlink.com/Gateway/dir825_revB/Beta/Firmware/dir825_revB_fw_202b01NA_beta02.zip

It looks like they BETA software must have been bad since it is no longer on the ftp site?

They must have pulled the update?

... Waiting for D-Link to produce a patch ...

I guess in the mean time I can just assign a static IP address to the machine as a workaround.  Oh well.