MAC level application blocking possible?
I am aware you can use DPI to block applications for an entire network but is it possible to only block applications for certain mac addresses?
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
@crrodriguez That's a valid point. I guess I am trying to restrict this for certain clients, like blocking the chat or game features for apps at night. Its a home network so I do have more control over things. I guess an alternative I could just make a isolated VLAN and restrict the clients to that.
- Copy Link
- Report Inappropriate Content
GoodOmens wrote
@crrodriguez That's a valid point. I guess I am trying to restrict this for certain clients, like blocking the chat or game features for apps at night. Its a home network so I do have more control over things. I guess an alternative I could just make a isolated VLAN and restrict the clients to that.
That's correct. Create a new VLAN and place the devices in that and you restrict this VLAN interface.
In addition, the DPI is based on L4 or L5. As for the L4 and L5, it is all based on the layer 3 which is the readable IP.
It cannot work with layer 2, which is not how a router processes traffic/packets.
- Copy Link
- Report Inappropriate Content
@GoodOmens Operating Systems use randomized mac addresses by default these days for privacy reasons.
Rework your thoughtsor explain what the actual problem is not the solution you found to it.
- Copy Link
- Report Inappropriate Content
@crrodriguez That's a valid point. I guess I am trying to restrict this for certain clients, like blocking the chat or game features for apps at night. Its a home network so I do have more control over things. I guess an alternative I could just make a isolated VLAN and restrict the clients to that.
- Copy Link
- Report Inappropriate Content
GoodOmens wrote
@crrodriguez That's a valid point. I guess I am trying to restrict this for certain clients, like blocking the chat or game features for apps at night. Its a home network so I do have more control over things. I guess an alternative I could just make a isolated VLAN and restrict the clients to that.
That's correct. Create a new VLAN and place the devices in that and you restrict this VLAN interface.
In addition, the DPI is based on L4 or L5. As for the L4 and L5, it is all based on the layer 3 which is the readable IP.
It cannot work with layer 2, which is not how a router processes traffic/packets.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 94
Replies: 3
Voters 0
No one has voted for it yet.