95Feature request: MAC address filtering
Are you planning on implementing MAC address filtering? I love your product and recently started using it (got 2 eeros covering my 2500 sq/ft home). Your security approach is very much appreciated, but I believe having MAC address filtering provides additional level of security, as passwords can be breached. I understand that MAC addresses can also be spoofed, but it is much more difficult. If the password is not designed to be difficult enough to guess, once it is breached, the access to network is wide open, whereas with MAC address filtering, any device without the approved address will not gain access to the network.
On the eero app, (at the point of identification of all devices), it would be helpful to have an option to approve the device's MAC address or reject it if you do not recognize it.
-
Hi mfgiggsy —
Thanks for reaching out and welcome to the eero community!
I am happy to hear how much you are loving your eeros, and we hope that you will continue to be happy with them.
We greatly appreciate your feedback, and I am happy to share this with our team. If there are any updates, I'll be sure to share them here :)
Thanks again!
-
Welcome @mfgiggsy I wouldn't worry about MAC filtering. Like hiding your SSID, it isn't worth very much (if anything) as far as security is concerned. Passwords don't have to be difficult to be strong. I recently read a report stressing that length matters far more than something that looks difficult to enter. As an example h&5U2v$( isn't any more secure than thiSpassworDiSverYeasYtOremembeRbuTiSlonG. I will see if I get motivated to dig up that document. I do however like the idea of being notified when a new MAC connects.
-
I found this comic about it. If anybody cares I can dig more later.
-
I still think that having MAC AF (Address Filtering) is very helpful in further securing your network.
As another feature request, why not have an app for Mac/WIN as well, which would be much easier to manage MAC AF along many other tasks. Similar to how Apple does it with Airport Utility.
-
If you want it , you want it. I just wanted to let you know that it really doesn't do much. You can research about it if you care to learn why.
-
I would like this possibly in the form of a BLOCK. so if something joins my network i can BLOCK IT. I supposed once COULD make a family filter can call it blocked, move devices there and keep a permanent block but its not the same.
-
-
Jeff C. Although this is an old thread, I'd actually like to see all new devices joining the network (main or guest) be automatically added to the blocked list until I explicitly unblock them. So even if someone manages to hack the network password or use a mac address spoofer, they don't have access to the network until approved by the admin.
-
Jeff C. This is not enough. It should be blocked by default. Then we can decide if we approve it or not. My children spoof MAC addresses daily and it is a cat and mouse game. Easier to deny by default.
-
-
Jeff C.
-
Great! Thank you EERO!
-
Loving the BLOCK feature (funny enough, I had to use it on myself once). But I was hoping to add something. Is it possible to "block" a MAC address from a specific Eero node, Jeff C. ? Ex: I don't want my iMac to "drift" to the upstairs node as the basement one is closest by far. I want to lock the iMac to the basement node by blocking its MAC address on the other two nodes. Possible? Crazy? Genius?
-
DMcWetty —
Glad to hear it!
As for the situation you experienced, we actually have a feature request you may be interested in following 😀
Feature request: Attach a device to a specific eero
Hope that helps!
-
Jeff C. Thanks. That is of interest. I know Eero isn't doing a public roadmap, but I'm only seeing 2 (relatively easy) things in the "implemented" section of feature requests. Any clues as to what features are highest priority?
-
DMcWetty —
Well, nothing is relatively easy :)
While those are the features we've completed that have been requested here, there were also plenty of features released before this community came to be (such as Family Profiles). Also, not everything we work on is based on a public request. While we hope to work on and develop many of the things that have been requested here, something that our team is always going to be focused on making better and better is our mesh—as we did with our release of TrueMesh. We are not ones to settle, so our team is always making improvements to the overall efficiency and performance of your system, which is provided in our frequent software updates.
There are also many other features we work on behind the scenes that don't get as much airtime, such as:
- Improving speed test accuracy
- Improvements in roaming
- Which eero a device is connected to
- Connection quality between your eero and the network
- Connection type of your eeros (wired/wireless)
- Connection quality between your devices and the network
- Connection type of your devices (wired/wireless)
- Ability to diagnose network health issues from within the app
As for what's the highest priority, well as you know, we don't have a public roadmap. However, our team is very much in tune with what is going on in our community and other channels. Simply put, our highest priority is delivering both the best mesh and connected home experience. While I realize that is a pretty vague answer, I can assure you we take every piece of feedback we receive very seriously and vet it and determine where it fits into the future of eero. We are excited for what's to come, and we appreciate both your's and everyone else's contributions in helping us continue to develop the eero home experience.
-
I have a son that is very tech savvy. He is spoofing his MAC address to get around me shutting down his internet at night. I know that I can block based on MAC address but I would like to only allow certain MAC addresses to be on the network so if he spoofs (changes) his address he can't connect to the network. Is this possible and if so, how?
-
clintonmorris
I have the same issue and made this request as well. I wish new devices connecting go into a default group blocking internet access. Then Admin gets notice to approve and apply to a family group so MAC address changes are not automatically connecting.
-
I’m in the same boat as clintonmorris and Yufasa in fact, it’s become a bit of a game to see which one of us can outsmart the other. Without having the ability to create a white list of MAC addresses, there’s not much more I can do with the eero to keep him off. Every time I block a new MAC address, he just creates another. It’s ridiculous not to have this feature. I realize some people on here feel that it doesn’t do much, so they don’t have to use it, but I for one would find it very helpful. I’m about ready to get rid of the eero at this point and find something else that will give me that option.
-
clintonmorris Yufasa I ended up putting our Eero system into bridge mode, using our old ASUS router to handle the advanced settings (not that MAC filtering is an advanced setting!). Now I have the mesh coverage of the Eero, and the MAC filtering of the ASUS. Problem solved.
-
DLThompson06 This may eliminate users from accessing the internet side but they will still be able to join the mesh network and as such have access to local devices/servers/etc.
-
Yufasa I'm looking for a way to block internet access for certain devices. Won't MAC filtering through the router do that?
-
DLThompson06 Sure but Eero actually have a way to block internet access built in, so why not use that? I will see if a can find the link to that functionality
-
Yufasa like I said before, Eero can block specific devices based on their MAC address. I’ve tried that aproach, but all my son has to do is spoof a new MAC address and he’s back on. We went back and forth doing that about 6 times. I needed a way to create a white list so only devices with specific MAC addresses are allowed on. Then it doesn’t matter how many new MAC addresses he comes up with, if it’s not on the list, he’s not getting on.
-
DLThompson06 Sorry old age! I forgot you were the one mentioning that before. The additional router is your only option for now and hopefully Eero developers will take note.
-
Yufasa that’s okay! And yes, hopefully they’ll take note. :)
-
DLThompson06
I have the same issue and I've been looking for a solution. Xbox could make changing Mac addresses a parent feature and not available to kids accounts, but I guess they haven't gotten enough sh** for it. So, their support says we should use a list. But Eero doesn't provide a list. Very frustrating.
-
-
I have been successfully using MAC AF for the longest time and feel more vulnerable now that I don’t have that extra layer. Is it possible to spoof a MAC address once you know a “white listed” one? Sure, but it is one more layer in defense and will make life difficult for the average “hacker”. Relying on the password alone, no!!! I do like the ability to blacklist a device so why not add MAC AF?
-
I strongly agree with Yufasa's post above about the ability to use MAC AF. I have just recently been investigating eero, so I am not yet a customer. However, I have been using MAC AF for years after someone was once able to break in to my password-protected network. Since then, no incidents that I know of. It's nice to be able to blacklist someone, but why not be proactive, instead of reactive, and use MAC AF. Not having this ability to use MAC AF with eero is a real deal-breaker for me.
-
I agree with the ability to add a whitelist feature. Yes you have built in the app to block a MAC address... but only after they have already connected. I would like a Whitelist feature to say "these are the only devices that should be connected to the network. Block all others"
https://community.eero.com/t/y7gl5w/mac-address-blacklist-and-white-list
-
Any updates on this feature request? I want to get a handle on this. Also would consider secondary SSID for devices that shuts off at specified times then I can keep parents devices and IoT on primary and kids devices on the secondary ssid. Please Eero help us control this better I feel like this is really a weakness in this solution.
-
This one is definitely needed. If you have kids, they will hand out the wifi password to anyone. With mac address filtering I can lock the primary network down to just the devices i know & force others to use the guest network
-
With this security request, you should also allow a default, block all new connections.
-
Eero team please advise on this feature request. Without MAC AF the family groupings and schedules are of little value. Just want new devices to go into a default group with no internet access or to a set schedule. Please help!
-
Please add the MAC Address Filtering feature. Also, make sure it works in Bridge mode.
-
Please add mac address, white list option.
We are a non profit and would like to keep our main (non guest network) limited to only this devices allowed in mac address white list.
Passwords get shared and we'd like an extra layer ensuring only allowed devices are white listed. Thanks!
-
So does eero moderate these requests?
-
Drewsrq Hit the vote button at the top of the thread for consideration in the feature list.
-
-
Any chance the MAC address option will come ?
i've blocked a device from the network and it still shows "activity", is there a way to block a device without having to change the password?
