MAC level application blocking possible?

MAC level application blocking possible?

MAC level application blocking possible?
MAC level application blocking possible?
2025-08-01 12:28:45 - last edited 2025-08-04 02:07:09
Model: ER707-M2  
Hardware Version: V1
Firmware Version: 1.3

I am aware you can use DPI to block applications for an entire network but is it possible to only block applications for certain mac addresses? 

  0      
  0      
#1
Options
2 Accepted Solutions
Re:MAC level application blocking possible?-Solution
2025-08-01 15:35:47 - last edited 2025-08-04 02:07:09

  @crrodriguez That's a valid point. I guess I am trying to restrict this for certain clients, like blocking the chat or game features for apps at night. Its a home network so I do have more control over things. I guess an alternative I could just make a isolated VLAN and restrict the clients to that.

Recommended Solution
  0  
  0  
#3
Options
Re:MAC level application blocking possible?-Solution
2025-08-04 00:51:46 - last edited 2025-08-04 02:10:17

  @GoodOmens 

GoodOmens wrote

  @crrodriguez That's a valid point. I guess I am trying to restrict this for certain clients, like blocking the chat or game features for apps at night. Its a home network so I do have more control over things. I guess an alternative I could just make a isolated VLAN and restrict the clients to that.

That's correct. Create a new VLAN and place the devices in that and you restrict this VLAN interface. 

 

In addition, the DPI is based on L4 or L5. As for the L4 and L5, it is all based on the layer 3 which is the readable IP. 
It cannot work with layer 2, which is not how a router processes traffic/packets. 

Recommended Solution
  1  
  1  
#4
Options
3 Reply
Re:MAC level application blocking possible?
2025-08-01 15:19:33

  @GoodOmens Operating Systems use randomized mac addresses by default these days for privacy reasons.

Rework your thoughtsor explain what the actual problem is not the solution you found to it.

  1  
  1  
#2
Options
Re:MAC level application blocking possible?-Solution
2025-08-01 15:35:47 - last edited 2025-08-04 02:07:09

  @crrodriguez That's a valid point. I guess I am trying to restrict this for certain clients, like blocking the chat or game features for apps at night. Its a home network so I do have more control over things. I guess an alternative I could just make a isolated VLAN and restrict the clients to that.

Recommended Solution
  0  
  0  
#3
Options
Re:MAC level application blocking possible?-Solution
2025-08-04 00:51:46 - last edited 2025-08-04 02:10:17

  @GoodOmens 

GoodOmens wrote

  @crrodriguez That's a valid point. I guess I am trying to restrict this for certain clients, like blocking the chat or game features for apps at night. Its a home network so I do have more control over things. I guess an alternative I could just make a isolated VLAN and restrict the clients to that.

That's correct. Create a new VLAN and place the devices in that and you restrict this VLAN interface. 

 

In addition, the DPI is based on L4 or L5. As for the L4 and L5, it is all based on the layer 3 which is the readable IP. 
It cannot work with layer 2, which is not how a router processes traffic/packets. 

Recommended Solution
  1  
  1  
#4
Options