Some users attempted to configure Mac Filtering on the home router to manage the clients connected to the Range Extender, but they ultimately discovered that their configurations weren't functioning properly. Here, we'll outline the cause and comprehensive instructions on how to make it work.
Here we take the M1800 and RE1200 as demonstrations.
Preparation:
1. Make sure the Range Extender has been configured successfully with the router.
2. In the Range Extender's web interface, go to Advanced Settings->MAC Repeater and enable it.
Range Extender will exchange a virtual MAC address created by Range Extender for each of its clients' actual MAC addresses due to its work mechanism. Because the router will regard the customers' virtual MAC addresses as their actual MAC addresses, so we need to enter the clients' virtual MAC addresses rather than their real MAC addresses in the router's MAC Filtering. You can comprehend the procedure better by contrasting the following information.
Step 1: Check your computer's real MAC Address (74-86-E2-0E-0D-87).
The IP Address can also be checked on the Range Extender's client list.
Note: Most Phones may use the Private MAC Address which needs to change to the Device MAC Address on the device's WLAN settings page.
Step 2: Then check the MAC Address of your computer shown on the router's Web interface. (Usually on the DHCP page). Here is your computer's virtual MAC Address (B2:4B:D6:0E:0D:87)
Note: You can also find the computer shown as the wireless device since the computer is connected to the range extender which is linked to the router wirelessly.
Step 3: As you can see, the router can only see your computer's virtual MAC Address, not real MAC Address. And there is a rule you can find the last six characters are the same on the MAC Address.
Real MAC Address: 74:86:E2:0E:0D:87
Virtual MAC Address: B2:4B:D6:0E:0D:87
Step 4: Find the Range Extender's real MAC Address which is printed on the bottom label and write it done (B4:4B:D6:25:FE:C4).
Go to the client list of your router again and you will find 'B2:4B:D6:25:FE:C4' and 'B2:4B:D6:25:FE:C6' are the MAC Addresses of your range extender.
Note: For the dual-band range extender, it communicates with the router via two bands, so you need to put the two MAC Addresses of the range extender in the MAC Filter list.
Step 5: Choose 'Allow list only (similar to White list)' and add the specific virtual MAC Address of the device you want to get internet.
If you want another device adds to the list, you need to figure out the virtual MAC Address and add to your router's MAC Filter list.
2 comentarios
@Dear Afeef,
There are two settings may override the MAC Filter.
1. SPI Firewall. Enabled by default. If you disable it on the web page. The MAC Filter will not work.
2. IPv6. The firewall is not working on IPv6 traffics now. So If you enable the IPv6 function. The IPv6 traffics will still work even if you enable the MAC filter function. You can disable IPv6 and check again.
“Dear Cudy Technical Support,
I have a problem with the MAC Filter function on my Cudy router, and I would appreciate your technical clarification.
Router model:
Cudy WR3000 V1.0
Firmware version:
2.4.19-20250829-192837
Operating mode:
Main Router Mode"
Dear Cudy Technical Support,
I have a problem with the MAC Filter function on my Cudy router, and I would appreciate your technical clarification.
Router model:
Cudy WR3000 V1.0
Firmware version:
2.4.19-20250829-192837
Operating mode:
Main Router Mode
The problem is that when I add a device’s MAC address to the MAC Filter blacklist/block list, the device is not blocked from Internet access. The device remains connected to the Wi-Fi and can still access the Internet normally.
I have already verified the following:
The router is operating in Main Router Mode. I am using the MAC address shown by the router in the connected devices/client list. The MAC address is added to the MAC Filter block list. MAC Filter is enabled. I applied/saved the configuration. I disconnected and reconnected the client to Wi-Fi after applying the rule. The client still has full Internet access.I am not referring to the Parental Control/Web Filter or domain blacklist. My issue is specifically with the MAC Filter / MAC Access Control function, where I expect a blocked MAC address to lose Internet access.
Could you please clarify:
1. Is MAC Filter fully supported and working on WR3000 V1.0 with firmware 2.4.19?
2. When using “Allow all except listed”, should a listed MAC address be completely prevented from accessing the Internet?
3. Are there any known bugs or limitations with MAC Filter in firmware 2.4.19?
4. Does MAC Filter behave differently between the 2.4 GHz and 5 GHz networks?
5. Does the MAC Filter work differently when Private/Random MAC Address is used by the client?
6. Are there any other settings that could override or bypass the MAC Filter?
7. If this is a firmware issue, is there a newer beta firmware or recommended workaround that fixes it?
I would appreciate it if you could explain why the blocked device is still able to access the Internet and provide the correct configuration or troubleshooting steps.
Thank you for your support.
Best regards,
Afeef