ER605 MAC Filtering Allow List Problem - LOST Connectivity with all devices

Hi, I've tried to set up MAC Filtering with Allow list and deny rest.
First try i've added only some of my devices connected directly with LAN cable to ER605. and I've lost any connectivity with ER605 after click Save
no ping response
Second try I did it after hard reset er605 and then added all 19 devices MAC adresses to MAC allow list,
press Save and again lost er605 - no ping response from my ETHERNET connected PC.
Deny packets rule work perfectly
But Allow packets rule add device, click Save and get "Unidentified network"
What can be wrong?
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
@Clive_A I apologize, my problem is that I did not notice how the switch after rebooting occupies 192.168.6.14
although the address is in reserved list 192.168.6.13 and I dont know why it is happening.
so I get on remote log ER605: firewall<4>,,,,Detected suspected ARP attack packets. Be careful!
and lots of detected ARP conflict and dropped packets. for all devices connected to switch.
I just set permanent ip on my tplink smart switch and problem is solved. working
thanks.
- Copy Link
- Report Inappropriate Content
What does the computer MAC address reading look like?
Does it match the MAC address you have configured?
PC nowadays support a dynamic MAC address for privacy. So, is this ruled out?
- Copy Link
- Report Inappropriate Content
@Clive_A Hi, all devices have Ip reservation and static ip\mac
- Copy Link
- Report Inappropriate Content
YuriyB wrote
@Clive_A Hi, all devices have Ip reservation and static ip\mac
That is to say, the device is getting the desired IP. You compared the MAC address in the IP-MAC binding and in the MAC filter.
The MAC address matches. Correct IP is assigned. That's the correct understanding of your description?
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
I think Firewall- Anti ARP spoofing setting with Permit the packets matching ip-mac binding entries only is similar to MAC Filter but a little better?
- Copy Link
- Report Inappropriate Content
YuriyB wrote
YES. Correct IP must be assigned because all IP and MAC Static. but I get Undefined network - no access to router.
arp -a
ipconfig
And what's the result of ping default gateway?
Please mosaic your sensitive information. Here is a list of information considered sensitive:
1. Public IP address on your WAN if your WAN is.
2. Real MAC address of your device.
3. Your personal information including address, domain name, and credentials.
For troubleshooting purposes, when a WAN IP is needed, please leave some values visible for identification.
- Copy Link
- Report Inappropriate Content
@Clive_A I apologize, my problem is that I did not notice how the switch after rebooting occupies 192.168.6.14
although the address is in reserved list 192.168.6.13 and I dont know why it is happening.
so I get on remote log ER605: firewall<4>,,,,Detected suspected ARP attack packets. Be careful!
and lots of detected ARP conflict and dropped packets. for all devices connected to switch.
I just set permanent ip on my tplink smart switch and problem is solved. working
thanks.
- Copy Link
- Report Inappropriate Content
YuriyB wrote
@Clive_A I apologize, my problem is that I did not notice how the switch after rebooting occupies 192.168.6.14
although the address is in reserved list 192.168.6.13 and I dont know why it is happening.
so I get on remote log ER605: firewall<4>,,,,Detected suspected ARP attack packets. Be careful!
and lots of detected ARP conflict and dropped packets. for all devices connected to switch.
I just set permanent ip on my tplink smart switch and problem is solved. working
thanks.
Good to know.
That happens when your network scale grows larger. I usually keep an Excel of the reservation and a diagram of the network, and modify or update it when a new device joins the network.
- Copy Link
- Report Inappropriate Content

Information
Helpful: 0
Views: 176
Replies: 8
Voters 0
No one has voted for it yet.