Block unknown devices on Deco M9 - user changes MAC address to fool parental controls
![](/avatar/default.png)
Hi all,
I've been using the Deco M9 Plus for a couple of days now and I'm very pleased with it. The wi-fi is excellent in whole our house. And especially the parental controls are very valuable too to control the extensive use of internet of some of the users.
I have a question however. Is there an option to (automatically) block unknown devices on the network? I'm familiar with the blacklist option but I wouild like to see a whitelist for devices as well. The problem is that one user in our home is smartass enough to change the MAC address of his computer each time the parental control blocks his internet. Ofcourse the Deco notifies me that a new device is noticed on the network and than I can manually block the device but is there anyway it can be done automatically?
The Deco acts like a router and is directly connected to my ISP modem.
Is there any other option to block unknown MAC addresses from the internet should there be no possibility to achieve this with the Deco?
Thanks for your replies.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
I am also waiting... I really love the Deco but I might have to start looking for a different solution if this isn't resolved.
- Copy Link
- Report Inappropriate Content
@7dwergen we need this too!!!
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
It is just too simple to pass around parental controls.
Please fix this tp-link, we really need it...
- Copy Link
- Report Inappropriate Content
@7dwergen another vote for this feature. Just came here to check on why this was happening and realized my kid is getting smarter. Anyway around or should basically return my Deco
- Copy Link
- Report Inappropriate Content
Deco M9 V2 firmware 1.5.0: Added support for whitelist under Malicious Content Filters of Antivirus.
Released for Europe already. Not yet for North America, but hopefully soon.
- Copy Link
- Report Inappropriate Content
The malicious content filter whitelist feature you mentioned is for exempting websites from content filtering. It would only be useful if the antivirus feature blocked a site users expect to function.
It is totally unrelated to the request on this thread for clear listing MAC addresses.
deco users would like the ability to deny access to the internet by default, allowing access only if a MAC address has been cleared or approved
Currently we can only block known MAC addresses ( rather than unknown ones ).
This means we do not have the ability to block unknown devices, and we cannot use parental controls for operating systems that support MAC privacy ( enabled by default on iPhone or iPad ).
To reiterate -- every iPhone or iPad automatically circumvents parental controls by default. This can only be fixed with a MAC whitelisting
- Copy Link
- Report Inappropriate Content
Sorry I am confused. I was basically looking for ability to control devices of my kids by simply blocking access at specific hours. At the moment, the dynamic MAC address is preventing this from happening. So parental control is a complete failure to me
- Copy Link
- Report Inappropriate Content
I would also like to see this feature added. Shame the original request was so long ago and no feedback has been given. Parental controls on my Deco system are now useless due to a smart ar*e kid too!
- Copy Link
- Report Inappropriate Content
![](https://static-community.tp-link.com/icon/8948432f591c4d71b5d8508983a0435f.jpeg)
Hi, Thank you very much for your feedback.
The 'unknown' device mostly means there is no hostname for this device or a basic MAC lookup hasn't identified a manufacturer.
Based on the feedback we have received, most of them are related to the Private addresses which hide the real MAC address of your device, very common for Apple devices due to security updates.
There are some suggestions for you:
1. On the Deco APP>three lines on the top>Deco lab>Wi-Fi assistant>MAC Loop UP Or https://maclookup.app/search/
It will help you find the manufacturer of this device then you could check around to locate this device and rename it: How to change the name of the client on the Deco app?
2. But if unfortunately, no assignment is found for this MAC and no suspicious device could be located. Please block this device first via Deco APP>More>Blacklist.
3. Since all the troubles started with Private address, you could also consider turning off private address,
For IOS devices: Setting -> WLAN -> tap on the blue info icon at the left of the deco Wi-Fi name -> disable the Private Address feature.
For Android devices: Settings app -> Network and Internet -> WiFi ->Connect to deco Wi-Fi -> Tap the gear icon next to the current Wi-Fi connection -> Advanced -> Privacy -> "Use device MAC"
For Windows 10 devices: Setting -> Network and Internet -> "WiFi" tab -> "Advanced Options." -> "Off" under "Random Hardware Address." -> Restart your computer.
Also, we have been trying to push the R&D department to consider adding the MAC filtering (Whitelist &Blacklist) on the Deco but this feature requires a comprehensive evaluation.
So if you also request this feature, please don’t hesitate and send feedback with your actual reasons for it via Deco APP>Overview>three lines on the top>help>contact us>suggestion.
Thank you very much for all your attention and support.
- Copy Link
- Report Inappropriate Content
![](/avatar/default.png)
Information
Helpful: 35
Views: 35469
Replies: 132
Voters 19
![voter's avatar](/avatar/default.png)
![voter's avatar](https://static-community.tp-link.com/icon/a3064cb5086149f6b5de826221c7f31d.jpeg)
![voter's avatar](/avatar/default.png)
![voter's avatar](/avatar/avatar-3.png)
![voter's avatar](/avatar/default.png)
![voter's avatar](/avatar/default.png)
![voter's avatar](/avatar/avatar-15.png)
![voter's avatar](/avatar/default.png)
![voter's avatar](/avatar/default.png)
![voter's avatar](/avatar/avatar-9.png)
![voter's avatar](/avatar/avatar-2.png)
![voter's avatar](/avatar/avatar-11.png)
![voter's avatar](/avatar/avatar-20.png)
![voter's avatar](/avatar/avatar-6.png)
![voter's avatar](/avatar/avatar-15.png)
![voter's avatar](/avatar/avatar-5.png)
![voter's avatar](/avatar/avatar-21.png)
![voter's avatar](https://static-community.tp-link.com/icon/90ecb4cc7f8e44eb95adcf923661abcc.jpeg)
![voter's avatar](/avatar/avatar-5.png)