NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Orbi Pro WiFi 6 MAC ACL with Wired Backhaul
I've been struggling with setting up MAC ACL security on my system. With wired backhaul I've discovered the need to add all of my wireless devices to the "allowed" list under both the wired network ...
stevethompson wrote:I have not tested if I need to do the same with a wireless backhaul.
Probably not - because this is a dedicated and isolated network.
The confusion is coming from the idea of a "wired backhaul" ... in fact, this does not exist (only in the simplified version using direct links between the SRx60 devices, making kind of a dedicated network again), for many others this is the users normal shared wired "work" network with switches, printers, computers, ...
One could dispute if the MAC ACL is intended to "secure" to limit the wireless access of the virtual radio, or if there is really more required like an MAC ACL filtering at both boundaries (Wireless SSID <-> Bridge and Bridge <-> LAN. From the pure practical view - who on earth does manage manage MAC white lists on switched networks (???) - in my opinion only the radio side should be covered.
schumaku wrote:
The confusion is coming from the idea of a "wired backhaul" ... in fact, this does not exist (only in the simplified version using direct links between the SRx60 devices, making kind of a dedicated network again), for many others this is the users normal shared wired "work" network with switches, printers, computers, ...
I must admit, I do not understand what you are saying.
But what appears to be happening is when a satellite is wire connected to the router any device that wirelessly connects to that satellite is treated as having both a wired and a wireless connection. Such that when enabling MAC ACL on the wireless SSID it is possible to connect an allowed device to both the router and the satellite, but if MAC ACL is enabled on the wired pathway those wireless devices need to be enabled there as well otherwise they can only connect have access via connection through the router.
This may be a bug in the MAC ACL implementation, or it may simply be a feature that comes with using a wired backhaul.
Again, I am getting the full performance I need from my setup, but it took much trial and error to figure out how to make MAC ACL control work when using a satellite connected via wired backhaul.
Same condition exists with fw: 3.2.0.108
When satellite port 1 is wired to router port 1, wireless devices must be MAC ACL enable in both the appropriate wireless SSID and as a wired connection.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
