MAC Filter
MAC Filter Overview
You can configure the Zyxel Device to permit access to clients based on their MAC addresses in the MAC Filter screen. This applies to wired connections. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC addresses of wired LAN client to configure this screen.
MAC Filter
Enable MAC Address Filter and add the host name and MAC address of a wired LAN client to the table if you wish to allow or deny them access to your network. You can choose to enable or disable the filters per entry; make sure that the check box under Active is selected if you want to use a filter. Select Security > MAC Filter. The screen appears as shown.
Security > MAC Filter
The following table describes the labels in this screen.
Security > MAC Filter 
Label
Description
MAC Address Filter
Select Enable to activate the MAC filter function.
MAC Restrict Mode
Select Allow to only permit the listed MAC addresses access to the Zyxel Device. Select Deny to permit anyone access to the Zyxel Device except the listed MAC addresses.
Add New Rule
Select an existing wired LAN client from the list to add as a new entry. Select Custom if you want to manually enter the Host Name and MAC Address.
Click the Add button to create a new entry.
Set
This is the index number of the MAC address.
Active
Select Active to enable the MAC filter rule. The rule will not be applied if Allow is not selected under MAC Restrict Mode.
Host Name
Enter the host name of a wired LAN client that you want to allow access to the Zyxel Device. You can use up to 17 printable characters except [ " ], [ ` ], [ ' ], [ < ], [ > ], [ ^ ], [ $ ], [ | ], [ & ], or [ ; ]. Spaces are allowed.
MAC Address
Enter the MAC address of a wired LAN client that you want to allow access to the Zyxel Device. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc.
Delete
Click the Delete icon to delete an existing rule.
Cancel
Click Cancel to restore your previously saved settings.
Apply
Click Apply to save your changes.
Add New Rule
You can choose to enable or disable the filters per entry; make sure that the check box under Active is selected if you want to use a filter, as shown in the example below. Select Security > MAC Filter > Add New Rule. The screen appears as shown.
Security > MAC Filter > Add New Rule
The following table describes the labels in this screen.
Security > MAC Filter > Add New Rule 
Label
Description
Set
This is the index number of the MAC address.
Active
Select Active to enable the MAC filter rule. The rule will not be applied if Allow is not selected under MAC Restrict Mode.
Host Name
Enter the host name of a wired LAN client that you want to allow access to the Zyxel Device. You can use up to 17 printable characters except [ " ], [ ` ], [ ' ], [ < ], [ > ], [ ^ ], [ $ ], [ | ], [ & ], or [ ; ]. Spaces are allowed.
MAC Address
Enter the MAC addresses of a wired LAN client that you want to allow access to the Zyxel Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc.
Delete
Click the Delete icon to delete an existing rule.
Cancel
Click Cancel to restore your previously saved settings.
Apply
Click Apply to save your changes.