Feature request: MAC address filtering

Are you planning on implementing MAC address filtering? I love your product and recently started using it (got 2 eeros covering my 2500 sq/ft home). Your security approach is very much appreciated, but I believe having MAC address filtering provides additional level of security, as passwords can be breached. I understand that MAC addresses can also be spoofed, but it is much more difficult. If the password is not designed to be difficult enough to guess, once it is breached, the access to network is wide open, whereas with MAC address filtering, any device without the approved address will not gain access to the network.
On the eero app, (at the point of identification of all devices), it would be helpful to have an option to approve the device's MAC address or reject it if you do not recognize it.

26replies Oldest first
  • Oldest first
  • Newest first
  • Active threads
  • Popular
  • Hi  mfgiggsy  —

    Thanks for reaching out and welcome to the eero community!

    I am happy to hear how much you are loving your eeros, and we hope that you will continue to be happy with them. 

    We greatly appreciate your feedback, and I am happy to share this with our team. If there are any updates, I'll be sure to share them here :)

    Thanks again!

    Reply Like
  • Welcome @mfgiggsy I wouldn't worry about MAC filtering. Like hiding your SSID, it isn't worth very much (if anything) as far as security is concerned. Passwords don't have to be difficult to be strong. I recently read a report stressing that length matters far more than something that looks difficult to enter. As an example h&5U2v$( isn't any more secure than thiSpassworDiSverYeasYtOremembeRbuTiSlonG. I will see if I get motivated to dig up that document. I do however like the idea of being notified when a new MAC connects.

    Reply Like
  • I found this comic about it. If anybody cares I can dig more later. 

    http://xkcd.com/936/

    Reply Like 1
  • I still think that having MAC AF (Address Filtering) is very helpful in further securing your network.

    As another feature request, why not have an app for Mac/WIN as well, which would be much easier to manage MAC AF along many other tasks. Similar to how Apple does it with Airport Utility.

    Reply Like
  • If you want it , you want it. I just wanted to let you know that it really doesn't do much. You can research about it if you care to learn why. 

    Reply Like
  • I would like this possibly in the form of a BLOCK.  so if something joins my network i can BLOCK IT.  I supposed once COULD make a family filter can call it blocked, move devices there  and keep a permanent block but its not the same.

    Reply Like
  • Hi Utter-Butter

    I'm happy to share that with our recent app release, 1.5.3, we have introduced the ability to block individual devices. You can read more here.

    Also, we have a Help Center article on the new feature here.

    Thanks for your feedback! 

    Reply Like
  • Jeff C. 

    Reply Like
  • Great!  Thank you EERO!

    Reply Like 1
  • Loving the BLOCK feature (funny enough, I had to use it on myself once). But I was hoping to add something. Is it possible to "block" a MAC address from a specific Eero node, Jeff C. ? Ex: I don't want my iMac to "drift" to the upstairs node as the basement one is closest by far. I want to lock the iMac to the basement node by blocking its MAC address on the other two nodes. Possible? Crazy? Genius?

    Reply Like
  • DMcWetty —

    Glad to hear it!

    As for the situation you experienced, we actually have a feature request you may be interested in following 😀

    Feature request: Attach a device to a specific eero

    Hope that helps!

    Reply Like
  • Jeff C. Thanks. That is of interest. I know Eero isn't doing a public roadmap, but I'm only seeing 2 (relatively easy) things in the "implemented" section of feature requests. Any clues as to what features are highest priority?

    Reply Like
  • DMcWetty —

    Well, nothing is relatively easy :)

    While those are the features we've completed that have been requested here, there were also plenty of features released before this community came to be (such as Family Profiles). Also, not everything we work on is based on a public request. While we hope to work on and develop many of the things that have been requested here, something that our team is always going to be focused on making better and better is our mesh—as we did with our release of TrueMesh. We are not ones to settle, so our team is always making improvements to the overall efficiency and performance of your system, which is provided in our frequent software updates. 

    There are also many other features we work on behind the scenes that don't get as much airtime, such as:

    • Improving speed test accuracy 
    • Improvements in roaming
    • Which eero a device is connected to
    • Connection quality between your eero and the network
    • Connection type of your eeros (wired/wireless)
    • Connection quality between your devices and the network
    • Connection type of your devices (wired/wireless)
    • Ability to diagnose network health issues from within the app

    As for what's the highest priority, well as you know, we don't have a public roadmap. However, our team is very much in tune with what is going on in our community and other channels. Simply put, our highest priority is delivering both the best mesh and connected home experience. While I realize that is a pretty vague answer, I can assure you we take every piece of feedback we receive very seriously and vet it and determine where it fits into the future of eero. We are excited for what's to come, and we appreciate both your's and everyone else's contributions in helping us continue to develop the eero home experience.

    Reply Like 1
  • I have a son that is very tech savvy.  He is spoofing his MAC address to get around me shutting down his internet at night.  I know that I can block based on MAC address but I would like to only allow certain MAC addresses to be on the network so if he spoofs (changes) his address he can't connect to the network.  Is this possible and if so, how?

    Reply Like 1
      • Garryladd
      • Garryladd
      • 5 mths ago
      • 1
      • Reported - view

      clintonmorris 

      I have the same issue and made this request as well.  I wish new devices connecting go into a default group blocking internet access.  Then Admin gets notice to approve and apply to a family group so MAC address changes are not automatically connecting.

      Reply Like 1
    • I’m in the same boat as clintonmorris and Yufasa in fact, it’s become a bit of a game to see which one of us can outsmart the other. Without having the ability to create a white list of MAC addresses, there’s not much more I can do with the eero to keep him off. Every time I block a new MAC address, he just creates another. It’s ridiculous not to have this feature. I realize some people on here feel that it doesn’t do much, so they don’t have to use it, but I for one would find it very helpful. I’m about ready to get rid of the eero at this point and find something else that will give me that option. 

      Reply Like 1
    • clintonmorris Yufasa  I ended up putting our Eero system into bridge mode, using our old ASUS router to handle the advanced settings (not that MAC filtering is an advanced setting!).  Now I have the mesh coverage of the Eero, and the MAC filtering of the ASUS.  Problem solved.

      Reply Like
      • Yufasa
      • Yufasa
      • 1 mth ago
      • Reported - view

      DLThompson06 This may eliminate users from accessing the internet side but they will still be able to join the mesh network and as such have access to local devices/servers/etc.

      Reply Like
    • Yufasa I'm looking for a way to block internet access for certain devices.  Won't MAC filtering through the router do that?

      Reply Like
      • Yufasa
      • Yufasa
      • 1 mth ago
      • Reported - view

      DLThompson06 Sure but Eero actually have a way to block internet access built in, so why not use that? I will see if a can find the link to that functionality

      Reply Like
    • Yufasa like I said before, Eero can block specific devices based on their MAC address. I’ve tried that aproach, but all my son has to do is spoof a new MAC address and he’s back on. We went back and forth doing that about 6 times.  I needed a way to create a white list so only devices with specific MAC addresses are allowed on. Then it doesn’t matter how many new MAC addresses he comes up with, if it’s not on the list, he’s not getting on.

      Reply Like
      • Yufasa
      • Yufasa
      • 1 mth ago
      • Reported - view

      DLThompson06 Sorry old age! I forgot you were the one mentioning that before. The additional router is your only option for now and hopefully Eero developers will take note.

      Reply Like
    • Yufasa that’s okay!  And yes, hopefully they’ll take note. :)

      Reply Like
  • I have been successfully using MAC AF for the longest time and feel more vulnerable now that I don’t have that extra layer. Is it possible to spoof a MAC address once you know a “white listed” one? Sure, but it is one more layer in defense and will make life difficult for the average “hacker”. Relying on the password alone, no!!!  I do like the ability to blacklist a device so why not add MAC AF?

    Reply Like
  • I strongly agree with Yufasa's post above about the ability to use MAC AF.  I have just recently been investigating eero, so I am not yet a customer.  However, I have been using MAC AF for years after someone was once able to break in to my password-protected network.  Since then, no incidents that I know of.  It's nice to be able to blacklist someone, but why not be proactive, instead of reactive, and use MAC AF.  Not having this ability to use MAC AF with eero is a real deal-breaker for me.

    Reply Like 1
reply to topic
Like9 Follow
  • Status Under Consideration
  • 9 Liked by
  • 1 mth agoLast active
  • 26Replies
  • 1440Views
  • 11 Following

Need Help? We're here for you!

We're big on support, and we want to make sure you always have the best eero experience possible. Here are several resources you can use if you ever need our help!


Quick links

Community Guidelines

Help Center

Contact eero support

@eerosupport

eero.com


Latest from the eero blog

eero, plus peace of mind

Learn more about eero Plus and how our security suite helps to keep both your devices and everyone in your home safe while online.