MAC address filtering problem...

[thetxstang]

Okay, so here's the situation: I use ATT Yahoo! DSL service at home. We have two desktop computers (Windows XP SP3) and a PlayStation 3 all hooked up via wireless to a fairly new 2WIRE DSL Gateway (built-in router and wireless access).

Just as an extra security layer, I am trying to enable MAC address filtering on the 2WIRE unit. This is where I'm about to pull my hair out. One of the desktops and the PlayStation 3 connect just fine with MAC filtering enabled. HOWEVER, the other Desktop absolutely will not connect. The moment I disable MAC filtering on the 2WIRE, the offending Desktop immediately connects.

Has anyone here ever experienced such an issue or can offer some advice on how to resolve the matter?

EDIT: I neglected to mention that the problem Desktop has a MSI PC60G 54 Mbps wireless PCI card, which receives better than average reviews.

EDIT Part Deux: I realize MAC addresses are easily spoofed. I also realize it's a very low form of security and that many find MAC address filtering unsafe, even when combined with much better security measures.

I should have added that I have WPA security enabled (WPA2-PSK AES to be precise). I also should have added that my desire at this point is just to determine exactly what the issue is. I despise being stumped by technical issues and always work to resolve them. It's the principle of the matter at this point.

PROBLEM RESOLVED: The problem has been resolved after many hours of trying to isolate this issue. It turns out that the 2WIRE gateway -- though it correctly detected the MAC address of the PC's wireless card -- was using the full computer name of the PC rather than the actual MAC address that was linked to it. (By the way, when I say "full computer name," I'm referring to the computer's name as viewed in System Properties or Network Places.)

To resolve the issue, I cleared the detected MAC addresses (though all were valid), and re-entered them manually, never allowing the 2WIRE to auto-prepend the full computer name to any of the MAC addresses.

snikt, thank you in particular for you assistance. You helped me indirectly by emphasizing the proper input of the MAC address. I also appreciate everyone else's help.

 

[boomerang]

The first thing that comes to mind is are you certain you're using the MAC for the wireless card and not the onboard NIC?

A model number on the 2Wire may help. It looks like they have several models.

Edit: Eh, that may not be useful as it looks like they direct you to AT&T for support. Thought maybe a manual could be downloaded. I have cable and am totally unfamiliar with this product.

 

[imported_snikt]

It may sound silly, but make sure you're typing in the MAC address correctly. Use a "zero" for the number, and the letter "o" for the letter, etc.

 

[thetxstang]

Originally posted by: boomerang
The first thing that comes to mind is are you certain you're using the MAC for the wireless card and not the onboard NIC?

A model number on the 2Wire may help. It looks like they have several models.

Thanks for the reply, boomerang. The 2Wire gateway is the 2701HG-B model. The onboard NIC has been disabled completely and the only available network connection is the aforementioned MSI PC60G 54 wireless PCI card. The only available MAC address belongs to the PCI card.

Any other ideas?

 

[thetxstang]

Originally posted by: snikt
It may sound silly, but make sure you're typing in the MAC address correctly. Use a "zero" for the number, and the letter "o" for the letter, etc.

Thanks for the reply, snikt, and good question. I don't even have to enter the MAC address on the 2Wire gateway. The 2Wire automatically picks it up, and yes, I have confirmed the MAC address is the correct one down to the letters and numbers.

Any other suggestions you can come with?

 

[imported_snikt]

Originally posted by: thetxstang
Just as an extra security layer, I am trying to enable MAC address filtering on the 2WIRE unit. This is where I'm about to pull my hair out. One of the desktops and the PlayStation 3 connect just fine with MAC filtering enabled. HOWEVER, the other Desktop absolutely will not connect. The moment I disable MAC filtering on the 2WIRE, the offending Desktop immediately connects.

Is the offending PC close enough to physically patch it into the router? If so, re-enable the onboard NIC, disable the wireless NIC, and try it with the onboard.

 

[thetxstang]

Originally posted by: snikt

Originally posted by: thetxstang

Is the offending PC close enough to physically patch it into the router? If so, re-enable the onboard NIC, disable the wireless NIC, and try it with the onboard.

snikt, I never thought to try this. The problem is, the ornery PC isn't anywhere close to the router. Also, my impression was MAC filtering was designed specifically for wireless connections as an extra security layer. Patched computers are, ostensibly, safe within the confines of the network and not susceptible to external pfishing.

I really appreciate your feedback. Anything else you can think of?

 

[seepy83]

Honestly, MAC filtering doesn't really protect you anyway...it's practically useless. Just make sure you're using WPA or WPA2 encryption with a long and complex key. That will be enough to keep anyone out that you don't want on your network. Just my two cents...

 

[xSauronx]

Originally posted by: thetxstang

Originally posted by: snikt

Originally posted by: thetxstang

Is the offending PC close enough to physically patch it into the router? If so, re-enable the onboard NIC, disable the wireless NIC, and try it with the onboard.

I really appreciate your feedback. Anything else you can think of?

yeah, dont waste time using MAC filtering. enable proper WPA2 security, or in the least, WPA AES CCMP and use a good, strong passphrase

 

[JackMDS]

You should use WPA or WPA2.

Any one that can brake WPA would spoof your MAC in 10 sec.

 

[thetxstang]

[Sigh.] While I sincerely appreciate everyone's feedback, I knew sooner or later someone was going to step in to inform me of how worthless MAC address filtering is and to forget it all together.

Yes, I realize MAC addresses are easily spoofed. And yes, I realize it's a very low form of security and that many find MAC address filtering unsafe, even when combined with much better security measures.

I should have added that of course I have WPA security enabled (WPA2-PSK AES to be precise). I also should have added that my desire at this point is just to determine exactly what the issue is. I despise being stumped by technical issues and always work to resolve them. It's the principle of the matter at this point.

It seems some people on AT's help forums frequently bypass a member's call for assistance on a specific matter. Instead, they tacitly point out how trivial someone's question is.

 

[spidey07]

It may only be capable of two mac filters. But really, mac filtering is not a security measure and totally and completely worthless causing more heachache than good.

 

[Crusty]

Originally posted by: boomerang
The first thing that comes to mind is are you certain you're using the MAC for the wireless card and not the onboard NIC?

A model number on the 2Wire may help. It looks like they have several models.

Edit: Eh, that may not be useful as it looks like they direct you to AT&T for support. Thought maybe a manual could be downloaded. I have cable and am totally unfamiliar with this product.

You can't have the letter 'o' in a MAC address unless you are displaying it in base-25 or higher 😉

 

[thetxstang]

A quick update: The problem has been resolved after many hours of trying to isolate this issue. It turns out that the 2WIRE gateway -- though it correctly detected the MAC address of the PC's wireless card -- was using the full computer name of the PC rather than the actual MAC address that was linked to it. (By the way, when I say "full computer name," I'm referring to the computer's name as viewed in System Properties or Network Places.)

To resolve the issue, I cleared the detected MAC addresses (though all were valid), and re-entered them manually, never allowing the 2WIRE to auto-prepend the full computer name to any of the MAC addresses.

snikt, thank you in particular for you assistance. You helped me indirectly by emphasizing the proper input of the MAC address. I also appreciate everyone else's help.

 

[xSauronx]

Originally posted by: thetxstang

It seems some people on AT's help forums frequently bypass a member's call for assistance on a specific matter. Instead, they tacitly point out how trivial someone's question is.

because it is a waste of time. youre admitting it yourself. and more often than not people try to implement the wrong types of security on wifi networks and come here asking for help, so people get used to trying to help to keep someone from wasting time.

also, as you found, you should have typed in the MAC addresses yourself and not wasted all the time troubleshooting a useless feature, lazy ass 😛

 

[JackMDS]

I believe that there is a special Secret Committee that gets all the releases of End-Users Network devices to make sure that nothing works according to some Standard and Logic.

The Committee would not allow a new release unless it is shown that the device?s menus are strangely design and worded, that the manual is written in the Most Convoluted way, and that the Marketing information is deceiving to the max.


:thumbsdown: - :thumbsdown: - :thumbsdown: