Cisco Small Business RV 120W Wireless-N VPN Firewall ...

Configuring the FirewallConfiguring Advanced Firewall Settings4To enable MAC address filtering:STEP 1STEP 2Choose Firewall > Advanced Settings > MAC Filtering.Check the Enable box to enable MAC Address Filtering for this device. Uncheckthe box to disable this feature.If you enable MAC filtering, in the Policy for MAC Address listed below field,choose one of the following options:• Block and Allow the Rest—Choose this option to block the traffic from thespecified MAC addresses and to allow traffic from all other addresses.• Allow and Block the Rest—Choose this option to allow the traffic from thespecified MAC addresses and to block traffic from all other machines onthe LAN side of the router.For example, two computers are on the LAN with MAC addresses of00:01:02:03:04:05 (host1), and 00:01:02:03:04:11 (host2). If the host1 MAC addressis added to the MAC filtering list and the “block and allow the rest” policy ischosen, when this computer tries to connect to a website, the router will not allowit to connect. However, host2 is able to connect because its MAC address is not inthe list. If the policy is “allow and block the rest,” then host1 is able to connect to awebsite, but host2 is blocked because its URL is not in the list. The MAC filteringpolicy does not override a firewall rule that directs incoming traffic to a host.STEP 3STEP 4STEP 5In the MAC Addresses table, click Add.Enter the MAC address and description to add to the table and click Save. Repeatfor each address to allow or block.Click Save.Configuring IP/MAC Address BindingIP/MAC Binding allows you to bind IP addresses to MAC address. Some machinesare configured with static addresses. To prevent users from changing static IPaddresses, IP/MAC Binding should be enabled. If the Cisco RV120W sees packetswith matching IP address but inconsistent MAC addresses, it drops those packets.Cisco RV120W Administration Guide 82