Hi All

I am tryting to lock down my router so that it only allows selected external MAC addresses in.

I have set each MAC addresss up in IP Object and then tagged them in an IP Group.
I have also setup a Firewall filter to block everything from WAN to Lan and then set an acception up WAN to LAN that allows the IP Groups IP Objects.

This doesnt work.

I then put the IP address of the acception to any and this then works so i know it is an issue with the MAC tagging....

Has anyone got a solution to this? i dont want to use IP acceptions as is for my mobile phone that doesnt have a fixed IP.

I look forward to hearing from you.

I doubt this will work. MAC addresses are at layer 2 and will not in the packet when connecting over layer 3 routed IP. https://en.wikipedia.org/wiki/OSI_model
For remote access use the VPN facility of the router and with strong username/passwords or MOTP codes. http://www.draytek.co.uk/information/our-technology/motp and http://www.draytek.co.uk/information/our-technology/sslvpn

It's so I can view my security cameras etc so I don't really want to be connection a vpn each time an alert is sent.

It's secured by password protection but I just wanted to make it only accessible by certain Mac addresses I'll give your links a read though.

Thank you for your reply. It is much appreciated