How to restrict MAC addresses on the WAN from accessing the server

You can do restrictions inside the router.

1.Solution 1: Static binding through a router.

Log in to the router management interface, switch to "DHCP Server", turn off "Router DHCP Dynamic Allocation Function", then switch to the "Static Address Reservation" tab, and click the "Add New Entry" button.

2.Then in the "Static Address Reservation" interface that opens, enter the IP address and MAC address of the computer you want to bind, and click the "Save" button. Use this method to add the address information of all the computers you want to bind.

3.Then switch to the "IP and MAC Binding" - "Static ARP Binding" interface, check the "Enable ARP Binding" item, and click the "Add Single Condition" button.

4.Then, from the "Static ARP Binding Settings" interface that opens, enter the IP address and MAC address to be bound, check the "Binding" item at the same time, and click the "Save" button to bind the IP and MAC.

5.Then switch to the "Wireless MAC Address Filtering" tab, where you can set the list of computers that are allowed to access the network, here you can set the list of computer MAC addresses that you want to allow access to the network, after setting, all users who have changed the MAC address will not be able to access the network.

7.In the main interface of the program that opens, check the two options of "Automatic isolation when whitelist IP address changes" and "Automatic isolation when whitelist MAC address changes", and click the "Start monitoring" button to enter the background monitoring state.

8.At the same time, we can set the "Isolation" option, in the lower right corner of the program, you can choose "Prohibit access to the intranet" or "Disallow access to the extranet", and you can also set the "Isolation Intensity".

At the same time, in order to ensure the normal operation of the LAN, we may need to detect the LAN disconnected ARP virus, and you can check the item "Automatic isolation when LAN ARP attacks are found", so that the normal Internet access of the LAN can be effectively protected.

1. For the company's small LAN, it is possible to restrict users from accessing the Internet through IP and MAC binding, but for some people who have a certain understanding of the network, this law is not effective. And small routes don't respond to this method.

2. When someone uses some methods to surf the Internet, which users can access the Internet normally and receive a prompt of IP conflict, which two cannot access the Internet at the same time. If the user who is allowed to surf the Internet is not turned on, which illegal user can use this IP and MAC to surf the Internet. The method is to observe more, find this illegal user, and impose a company's disciplinary punishment on him.

A: Usually give an account with low permissions and close its network attributes so that it cannot modify the network attributes. Method: regsvr32 U S

regsvr32 /u /s

regsvr32 u s run it.

B: Install an Internet prompt software, as long as this computer accesses the gateway, it will return a prompt to you.

IP and MAC is an identification of the Internet.,It's equivalent to a code name.,You can only limit it through these.,But changing to the same MAC and IP will definitely cause IP conflicts.,As a result, both computers can't access the Internet.,I don't know which one you changed is how to get on the Internet.。。。 Is it that the computer that allows access to the Internet has not been turned on?

This problem should be due to improper human control, according to what you said, there is no way to limit this kind of breakthrough, but there are a few questions to mention to you:

1. How did "he" get the IP address and the corresponding MAC;

2. How is "his" network cable connected (it won't be that he has unplugged the network cable on another server);

If "he" doesn't have the above two conditions, I don't think "he" can break through your limitations;

into the route settings. Security Settings - MAC Address Filtering - Fill in the MAC Addresses to be Restricted - Status Select Effective, Save.

You can let those MAC addresses registered in your router go to the Internet, and those who are not registered are not allowed to go to the Internet! It's useless for them to change to anything!

This is because you have enabled NAT Basic Firewall, open the Routing and Remote Access Manager, click on IP Routing, right-click on the NAT Basic Firewall property, look at the public interface connected to the Internet, remove the tick to enable Basic Firewall on this interface, OK to exit, and then restart the routing and remote service;

If it still doesn't work, delete the existing route and remote server in the manager, reconfigure the route and remote server, and remove the checkmark before setting up the basic firewall to protect the selected interface when selecting the NAT Internet connection page;

The NAT basic firewall here does not refer to the firewall that comes with the operating system, but a set of rules that control network access through custom implementation of routing and remote services, similar to the network access control function of ordinary firewalls, which can play a role in controlling network access by allowing access or not allowing access in accordance with the regulations. If you want to be able to do both web server and NAT routing, you must remove this NAT basic firewall.

1. Enter Server Management in the ** bar of the browser, and enter it**.

2. Enter the ** and enter the account password to log in to the server.

3. After entering the Internet control bar, check Turn on Internet control, and click the Quick Settings option at the bottom of the page.

6. Select Time as All Time and click Next.

7. Click the end option to complete the setting.

1. Obtain the IP and MAC addresses of all users in the LAN.

How to get your own computer IP and Mac: win+r, enter cmd, use"ipconfig /all"View.

2. Log in to the broadband router.

Open IE, the input is generally this....), the login window will appear.

Account: admin

Password: admin (this is the default, generally do not change the drop....)If it's changed, I'll study how to crack it later, and post it when there is progress)

After logging in, the broadband router settings page will appear.

3. Only allow your own computer to access the Internet.

1.Settings page - DHCP server - static address assignment - bind your own IP address to your MAC address (enter and save it).

2.Settings page - Security Settings - Firewall Settings - Select Turn on Firewall, Turn on IP Address Filtering, Turn on MAC Address Filtering - Select"Packets that do not comply with the IP address filtering rules are prohibited from passing through the router"with"Only MAC addresses that are enabled in the MAC address list are allowed to access the Internet"。

3.Settings Page - Security Settings - IP Address Filtering - Add New Entries - Fill in your IP address and select Make All Entries Active.

4.Settings Page - Security Settings - MAC Address Filtering - Add New Entries - Fill in your MAC address and select Make All Entries Active.

After setting it up like this, hehe, no one can go to the external network except you, but the inside of the LAN can be accessed normally.

Fourth, do not allow a certain computer to access the Internet.

1.Settings page --Security Settings --Firewall Settings --

Select Enable Firewall and enable MAC address filtering"Disable enabled MAC addresses from the Enabled MAC address list from accessing the Internet"。

2.Settings page - Security Settings - MAC address filtering - Add new entry - Fill in the MAC address of the computer that is prohibited from surfing the Internet and select Make the entry effective.

After this setting, computers that are prohibited from accessing the Internet will not be able to access the Internet, but they can be accessed normally within the local area network. For settings that only allow one's own computer to access the Internet, it is more difficult for other computers to access the Internet (except for hacking into the router and changing the settings).

You look like a dumb router, right? Start learning the mac address of the computer, and then bind the IP address -- and then limit the IP address OK

Now a broadband router for home and small office can meet your requirements:

Enter the router configuration interface, in the access control (there are slight differences in the statements of various models of routers), add the MAC address of the machine you want to prohibit from surfing the Internet, save the configuration and restart the router - the MAC address is the physical address of the network card, run it on the computer, enter the DOS window, and use ipconfig all to see.

The route of the good point has this function, and the MAC address is bound to the point after the point has a prohibition of accessing the Internet

Use P2P software! It's easy to implement your requirements, and it's completely free and easy to use!

Set up IPMAC filtering.

The IPMAC filtering function matches the source MAC address and source IP address in packets at the same time, and allows hosts to access the Internet only if both the source MAC address and the source IP address meet the requirements. The IPMAC filtering feature supports the following two matching methods:

Only clients assigned by the DHCP server are allowed to access the Internet: After this feature is enabled, users who are not in the customer list assigned by the DHCP server of the router cannot access the Internet. This method can be used in enterprise environments, as enterprises typically use DHCP to assign IP addresses to clients.

Only clients that are statically bound to ARP can access the Internet: After this feature is enabled, clients that are not bound to the ARP table cannot access the Internet. This method can be used in the environment of Internet cafes, where they usually set a static IP address for the client.

Page Wizard: Security Zone Access Control IPMAC FilteringThis page provides you with the following main functions:

It should be no problem, the ER8300 is enterprise-grade. MAC address filtering is generally done in the security settings.

1.Connect the broadband cable directly to the computer, write down the IP address, subnet mask, default gateway, and DNS server address of the local connection of the computer, and change it to "automatically obtain IP address", "automatically obtain DNS server address" -- OK, and click OK in the dialog box of "Properties" of the local connection.

2.Connect the broadband line to the routing WAN port, and use a network cable, one end to the computer and the other end to the routing 1 2 3 interface.

3.Open your computer browser and enter the router settings interface in the ** bar.

Click "Advanced Settings" on the home page, click "Internet Settings", select "Static IP", enter the IP address, subnet mask, default gateway, DNS server, and click OK.

4.Click on the system status, and the WAN port status shows that it is connected, see if you can access the Internet.

Click OK at the beginning of 35. (When cloning, you need to take a network cable to connect the computer to any one of the router 1 2 3 interfaces, do not connect the wireless signal of the router route).

6.After cloning, click on System Tools - Restart Router.

If you still can't access the Internet, click Advanced Settings - LAN Port Settings, change the default to a try.

First of all, the MAC address of the computer is not something you can set, and it is generally burned in the network card and cannot be modified. Secondly, you should enable the static IP connection feature on your router, and then fill in the IP address assigned to you by unit, and the gateway, as well as the mask, DNS, etc. Finally, you have to choose to clone the Mac address.

On your computer, you just need to change the gateway to your router's IP address.

Clear the binding list and see if you can get on. If I can get on, I bind it. If you can't get on, then it's not a matter of binding.

If you can access the local area network, it may be that the MAC address is restricted by the external network access, and there are two ways, one is that you can't access it in the control list, and the other is that you can only access it in the control list. If you want to rule it out, then cancel this function and try to see if it can be used.

The router is set up with MAC address filtering, which can restrict computers in the LAN from accessing the Internet, only in the LAN.

This cannot be achieved with the built-in features of Windows, and must be achieved with the help of access policies in the router or firewall!