Hi There

I've just purchased a Vigor 2862 router and i need some guidance on the below.

I am installing this router into a customers site which needs to be locked down completely i.e. only specified MAC addresses are allowed to use the router so if someone tries to plug into it and its not on the allow list, they are simply blocked.

Is there a way of having a MAC allow list on LAN connections Similar to how the Wireless LAN Access control list works? or is it a case of setting up a firewall rule to block traffic?

Thank you in advance.

This could be accomplished using "Wired 802.1X" (User-based, rather than MAC-based).

See: https://www.draytek.com/en/faq/faq-connectivity/connectivity.lan/how-to-do-port-based-access-control-by-wired-802.1x/