NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Orbi Pro Security: What is better MAC ACL or Enable Access Control???
Hello Again,. I have a very simple network setup....Router - Satillite. 3 SSID 1. For Admin. 2. Staff 3. ioT. Total about 20 devices connenting. Pretty simple and straightforward. cuurentl...
Retired_Member wrote:
cuurently for Security, MAC ACL is diabled on all SSID.
MAC ACL is a management pain in general. You could enable it, register all MAC addresses of the device connecting to your wireless network. Then you will find overly smart devices defaulting to random MAC addresses (so tomorrow the same device won't connect again because a different MAC is used), and in two weeks you will be back wondering why the new computer, the replaced mobile phone and so on won't connect to your network anymore.
Retired_Member wrote:
Access Control is also, Not enabled......
As above - it just adds the a MAC based access control for the complete network, wireless and wired.
Both variants can be used only if you have tight management control of all your devices, can manage all your devices, have good processes for adding new devices to the network, have good processes in place for replacing existing devices, availability of network admin when you are using BYOD and your workers are coming in early morning or in the evening with a new or replaced device.
Never deploy more security than what you understand and what you can handle.
Retired_Member wrote:
My onlly concern is I am seeing a lot of DoS Attacks/Scans...
Complete different story, unrelated to the to the MAC ACL on the wireless radios and Access Control on the local network. See my reply on your dedicated thread.
Retired_Member wrote:
cuurently for Security, MAC ACL is diabled on all SSID.
MAC ACL is a management pain in general. You could enable it, register all MAC addresses of the device connecting to your wireless network. Then you will find overly smart devices defaulting to random MAC addresses (so tomorrow the same device won't connect again because a different MAC is used), and in two weeks you will be back wondering why the new computer, the replaced mobile phone and so on won't connect to your network anymore.
Retired_Member wrote:
Access Control is also, Not enabled......
As above - it just adds the a MAC based access control for the complete network, wireless and wired.
Both variants can be used only if you have tight management control of all your devices, can manage all your devices, have good processes for adding new devices to the network, have good processes in place for replacing existing devices, availability of network admin when you are using BYOD and your workers are coming in early morning or in the evening with a new or replaced device.
Never deploy more security than what you understand and what you can handle.
Retired_Member wrote:
My onlly concern is I am seeing a lot of DoS Attacks/Scans...
Complete different story, unrelated to the to the MAC ACL on the wireless radios and Access Control on the local network. See my reply on your dedicated thread.
Thank you schumaku
Both security options have been disabled for about 2-3 month's, and no issues. Noone is trying to "Hack" into our network.
So I think I will follow your advise from below "Never deploy more security than what you understand and what you can handle."
And I will leave them both in the disabled state....my only conceren was the logs showing the DoS Attack: Scan , stuff.
Cheers
dH
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
