I would like to ban a specific device from accessing the internet (including or not including the lan) by mac address (my Son's iPod and or playstation if he has been bad).

I have another wireless access point (linksys, ddwrt, no dhcp).

Previously i have attempted to do this by
LAN >> Bind IP to MAC
say 192.168.4.32
no Strict Bind (i don't want to maintain a list of all things on the network)

Obviously if I don't do strict bind he could change the mac address of the device and get in that way, but that's way too technical for him.

then in
Objects Setting >> IP Object and...
Objects Setting >> IP Group

or straight to...
Firewall >> Filter Setup >> Edit Filter Set >> Edit Filter Rule

Put in the Source ip eg 192.168.4.32
or edit then Address Type Group and Objects

(I am a little confused in here regarding (Direction-Source IP, Destination IP) and whether the Index(1-15) must be
filled in or not, i have assumed that if i put nothing it would be all the time)

Nothing happens at all. Even if i reboot the system (i would not have thought i would have needed to?)

I have looked at a previous post.
http://www.forum.draytek.co.uk/viewtopic.php?f=2&t=16438&p=69562&hilit=firewall+deny+mac

Also i was wondering if it would work with, Objects Setting >> IP Object, Address Type: Mac Address, then what should
i enter for Start IP Address? 0.0.0.0?

Thanks
William
Vigor 2830n Firmware 3.3.7_2471201

Got it working this time. Noob error. :oops:

I should have put the firewall filter in the Default Data Filter.
I don't know how the others(3-12) could be used? Other than switching in and out different filters.