Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[hkfriends]

HI there,

Why DIR-655 MAC filtering applying for both wireless and wired?
How can I only apply for those Wireless network machines?


thanks

[vaz]

I thought this was odd too. No reason why wired connections need to be filtered.

[hkfriends]

yep, most of the routers only set MAC filtering for wireless, NOT wired. 

[DRT-1000]

Probably because the DIR-655 is a home class product. Albeit a really good home product, but still only a SOHO router.

[fallnout]

Hi
I can understand the rationale behind filtering the MAC address for ALL. That feature is crucial for an enterprize, when dealing with 50-200 PC's and you need to stop "some" wired PC's NOT to access the Internet.
However, it becomes counterproductive in a SOHO environment, as you would need to add ALL wired and wireless MAC address, and MAY end up locking yourself out, in error.
Most SOHO routers use both MAC address filtering AND WPA2 for ssecurity.
I am using the DIR-655 as an AP, so I turned mine off, and used only WPA2 with 63 characters to secure the wireless.
It took me hours to figure that out....lol 
Cheers 

[magius]

Probably because the DIR-655 is a home class product. Albeit a really good home product, but still only a SOHO router.

Not an excuse, my other DLink router, the DGL4300 is a Home class product too. It gives you the choice to filter both wired & wireless or one or the other. On top of that it doesn't seem to have the 24 MAC rule limit that the 655 does (nor the 30 DHCP reservation limit).

Are there any valid technical reasons why the DIR655 cannot do the same?

[hkfriends]

yes, they should have both wired or wireless selection 

[DRT-1000]

Are there any valid technical reasons why the DIR655 cannot do the same?

I'm sure it can, but it was not added to the firmware. *shrugs*

[ddwinell]

Yes, the DGL-4300 lets you specify Wired or Wireless for MAC filtering, the DIR-655 does not.

We can submit a request to Product Management to implement this feature. But there are no guarantees to getting it added.

[AWDL]

Valid Technical reason may be memory of the device or allocation of the memory and processing power of the device.
Valid Marketing reason may be differentation.

or i could just be the preference of the person. The guy who designed the DGL-XXXX is not the same guy who designed the DIR-655 as it currently stands.

May be we will have a third product that does the things both products do, charge a little more , and kill the other lines. I can't think of any examples in the world of that....other forum members may examples.

[hkfriends]

unfortunately there is no 3rd party firmware for DIR-655
otherwise, someone can help but not d-link 

[fallnout]

Hi hk
I have an idea.... here goes 
Setup the DIR-655 with WPA2-AES with a 63 character passphrase and match that with your notebook adapter.

Here is the scenario .....
Two wired PC's
01:xx:xx:xx:xx:xx (this one is used to access the DIR-655)
02:xx:xx:xx:xx:xx
One wireless PC (WPA2-AES w/matching passphrase)
03:xx:xx:xx:xx:xx

If you choose ALLOW Network Access, then input 01, 02 and 03.

If you plugin a third wired PC, it will NEVER get network access, because ONLY 01, 02 and 03 are allowed. Also you would never remove 01 or else you have locked yourself out of the router, unless you can use 02.

The drawbacks with this is that IF you plugin another wired PC, you MUST use 01/02 to ADD the MAC of the newly added PC. It now becomes a pain to remember that only three PC's are allowed to access the network. If you add a network printer or NAS to the router, you will need to add those MAC addresses.

The benifits are that no NONauthorized PC can get into your network. If some smartalec maintains that he can break your MAC address (not impossible), he will not be able to break your WPA2-AES. If you are fixing a virus laden PC, you can plug it in to the router, but it will not be able to infiltrate your network because its MAC is not allowed.

You are telling the "smartalec" that he will have to break two locked doors and to accomplish this he has to use software to figure the MAC address AND take 12-24 months to reverse engineer the encyrpted 63 character WPA2-AES passphrase.

If you do not add other wired PC's, then it will remain fairly static, however, if you add and remove a lot of PC's, then it becomes a royal pain in the fingers.

In your case, I would suggest that you could use the Z5, as that is acting as the DHCP server,  to restrict the MAC addresses.

Cheers 

[AWDL]

After some discussion internally. I am asking that we not change the DIR-655 filtering. I would rather have an SMB/enterprise product that treated the wireless network as a separate LAN with those filter capabilities.

For five nodes in the home you can can configure MAC filtering for wireless and wired clients together.

[dmorack]

After some discussion internally. I am asking that we not change the DIR-655 filtering. I would rather have an SMB/enterprise product that treated the wireless network as a separate LAN with those filter capabilities.

For five nodes in the home you can can configure MAC filtering for wireless and wired clients together.

Five nodes?  Some of us use switches to connect much more than five wired devices.

That being said, I do like the wired filtering in that I can keep visitors from connecting devices to my network without my knowledge.

I have no problem with separating the filtering into wired and wireless, just as long as the wired filtering is possible.

[magius]

After some discussion internally. I am asking that we not change the DIR-655 filtering. I would rather have an SMB/enterprise product that treated the wireless network as a separate LAN with those filter capabilities.

For five nodes in the home you can can configure MAC filtering for wireless and wired clients together.

No wonder... I must admit that the vast majority of homes doesn't have many computers (wired & wireless), but I bet those that would research and buy products like the 655 do.

For the vast majority, they couldn't care less about the performance, we do.

In my case, I have more than 5 nodes all the time. Plus sometimes I will bring work home, that means additional nodes...

Not to mention that currently there are a significant amount of electronic devices that will take advantage of network connectivity...

- Cellphones (iPhone, PDAs)
- TiVos
- Slingboxes
- XBox
- Xbox360
- PS3
- PS2
- Wii
- LocationFree
- Next gen media players (HD-DVD, Bluray)
- LCD picture frames
- NAS units (like your own DNS-323)
- Satellite boxes

Something tells me that with a lot of homes having a combination of the above plus multiple computers (be it work related or not) your 5 nodes will run out in a hurry.