[tsawyer1001001]

I wanted a sanity check to make sure I'm using this correctly. my current configs are

Router Model Netgear WNDR4300
Firmware Version DD-WRT v3.0-r62540 std (11/05/25)
Kernel Version Linux 3.18.140-d6 #250627 Wed Nov 5 12:25:52 +07 2025 mips


I recently added a new printer to the network. the printer was able to join and I was distracted with something else at the time, normally I add the mac address to the table before attempting to add a device. I really thought I had my configs to say not only do you need the correct pw to join the network, you have to come from an approved mac address. since the mac table does not have a field to identify the object (which phone, tablet, device since over time some are retired/upgraded/no longer needed) I'd even like to clean it up where it's only devices I currently use.

attachment shows the mac filtering window

[Alozaros]

Bear in mind, most of the new devices use private mode by default and generate new mac or fake mac every time so, you may have to switch to their real mac address when using this option, otherwise you will get into a troubles...i never use this option as it is easy to mitigate and causes lot of headache in terms of maintaining it...from security side, its easy to burst so, not much point for me...but in some scenarios it could be valuable...indeed...
And yep no client names only mac's so you have to do know what is what...

[kernel-panic69]

Along with ensuring you don't use MAC address randomization on the client devices for the SSID(s) in question, use static leases and keep the list current. The online webUI demo doesn't show the pop-up for the MAC address filter list and I don't have a photographic memory of that page to see if there are (+) and (-) buttons for each MAC address to prune them from the MAC filter page(s). I do know that everywhere else relevant for adding and removing static leases, the buttons exist, though.