
So is MAC filtering a dead issue? A layered security strategy

Hackers also figured out how to circumvent it, by sniffing addresses of connected devices and then spoofing or masquerading as one of them. With the emergence of reliable encryption protocols, including WPA2 (Wi-Fi Protected Access II), the strongest, we heard less about MAC filtering. If MAC filtering is activated, regardless of what encryption security is in place, the AP only allows devices on the safe list to connect, or blocks all devices on the black list – even if they have the encryption key. Using the access point configuration software, you can create a safe list of allowed client devices or a black list of banned devices. The MAC address is “baked into” the hardware and sent automatically to a Wi-Fi access point when the device tries to connect to the network. Learn when (and when not) to use this measure on top of strong encryption.īack before the Wi-Fi industry sorted out its problems with WEP (wireless encryption protocol), the original – and flawed – encryption security built into the technology, many experts recommended using something called MAC filtering to shore up the crumbling defenses.Įvery Wi-Fi device is assigned a MAC (Media Access Control) address, a unique 12-digit hexadecimal identifier issued by the IEEE, the standards body that developed the Wi-Fi protocol. The following steps will show how to disable Default Authentication mode in MikroTik Wireless Router.It’s not the be-all and end-all of Wi-Fi security, but MAC filtering can provide a layer of additional protection for your wireless network. So, first we have to disable Default Authentication so that WiFi AP checks MAC address along with SSID and Password authentication.

Anyone can be connected to Default Authentication enabled WiFi AP just knowing the WiFi SSID and Password. Enabling MAC Filtering in MikroTik WiFi APĭefault Authentication is enabled by default in MikroTik WiFi. In this article, I will show how to filter device MAC address in MikroTik WiFi AP so that any unauthenticated device cannot be connected in your network although he/she knows your WiFi SSID and password.

I also discussed how to configure virtual AP on a physical wireless interface. In my previous article I discussed how to configure basic WiFi AP in MikroTik Wireless Router.

So, a MAC address filtering WiFi Access Point can easily be established with MikroTik Wireless Router. This feature helps to allow only any specific MAC address in MikroTik WiFi AP. Access List is an amazing feature in MikroTik Wireless Router.
