I have TP-Link TL-ER604W router wih MAC filtering enabled, allowing only clients from the list. I also have a TP-Link TL-WA850RE range extender in WDS mode.
The trouble is, when a client connects to the range extender, it can connect to the internet even though it isn't in the list of allowed MAC addresses.
Can someone please advise me as to what I'm doing wrong?
Best Answer
MAC filtering is a completely inadequate method for increasing network security. Anyone can spoof any used address, MAC addresses are never encrypted. You need to use WPA2.
The router sees the MAC address of the extender, not the one of the client. So, if you allow the extender's MAC you allow everything connecting through it.
edit: If the MAC filter needs to work through the extender you'll need to filter the MAC on the extender.
PS: have you read this? Apparently, TP-Link has some specialties on their extenders.