UniFi Mac Address Filtering

[@yourpcmd]

I can confirm that the UDM Pro SE and my UDM-Pro-Max Restricted are disabled. My US-8-150W, Lite 16 PoE, Flex, or Flex mini are not disabled. Seems to be only the UDM's. However, my USG Pro 4 is not disabled either. I know it's an EOL product, but it still works. Thanks for the video, Willie.

[@Realloyalist]

My Flex and Flex Mini units have the Restricted option disabled. Also the UXG Pro does not have the standard port options including Restricted.

[@Kiwi0Six]

My FlexMini also has Restricted disabled! My UDM SE & Lite XX PoEs match this report.

[@dh-net]

My UDM-SE and Flex and FlexMini all have the restricted option disabled. I’m sure this used to work on the Flex as i setup MAC Address filtering (using port profiles) for my cameras (on the outdoor Flex, since its outside) - has this changed in an update??

[@YaGr-ip3ub]

Ok so I did some research: Some products have the feature (it is displayed in the TecSpecs as "MAC address blocking") and some don't have it like the USW-Ultra (then it is not shown in the TecSpecs) .. also Ubiquiti says: This feature is not available for built-in ports on the UDR, UDM-Pro, UDM-SE or UDW. I don't know why the some Layer 2 products have it and some not... I mean you can also turn up the security if you use some isolated VLANs and assign that to an Port.

[@bryandulock5286]

Yes, all ports on UDM Pro Max have the Port > Restricted setting greyed out (can't be selected). Exception: Port 9, which is being used as a WAN port, does not show this setting. It only shows Interface configuration options.

[@tomcar4497]

Hi Willie nice video. How about a video about swapping an USG Pro 4 with Cloud-Key Gen2 over to the Enterprise Fortress Gateway?

[@WillieHowe]

@@tomcar4497 If you send me an EFG I'll put one out.

[@tomcar4497]

@@WillieHowe Would realy like to, but I haven´t one yet. Loved to see you going over it but right now only fanboys seem to get one from ui. Maybe you´ll get your hands on one later. I love your content - keep on going.

[@Krupers]

What if on my UDM I see this opion to be "Disabled"?

[@familiefossa2622]

Hi, bin looking around for how to lock down the lan to an AP. Using MAC restriction pushed me to add the MAC-addresses of all the AP clients on the switch port connects to the AP, too! Is there a way to get around that? I am just learning to setting up firewalls etc. on unify and have been looking around for a „how to“ but what I found was still to much for me as a new be!

[@fbifido2]

can the Unifi guest portal now do mac-address filtering???

[@thangmanh3384]

How to get all of MAC list filter by text? or Export MAC list?

[@rogerf3622]

On the UCG Ultra it is greyed out.

[@SaxyOne]

Confirmed. The CGU has the option grayed out.

[@sekritskworl-sekrit_studios]

Yep... My UDM Pro Max is also showing "restricted" as Grayed out

[@cyabro]

My U6 IW also has the Restricted option greyed out.

[@EuropaSteve]

The same machine scans my internet exposed game servers every night using multiple IPs but the same MAC. How can I blacklist that MAC ID coming in from the internet?

[@TheRBDIGroup]

I added a mac restriction to a connected AirMax bridge AP to a multipoint connection to other buildings. I lost access to everything on and in the other buildings. The bridging AirMax devices and APs went offline in the controller and all devices disappeared as well as the devices losing internet access.

[@sekritskworl-sekrit_studios]

How do we target mac address so that it can be addressed in "Profile" manager? We can only have 4 WLAN, which can only have one network... I wanted multiple VLANs, but they can't seem to share WLANs, so i'm stuck. I want to push certain devices out of VPNs and have others go normally. Not sure what to do here. Also.. I'm in an old house, which is difficult to route Cat6 through insulation and not worry about damaging the structural integrity of joists, etc.... So "Port management" isn't a "fool proof" solution for some of my devices which can't reach network network gear in basement.

[@davidwright6105]

I tried this with all my outside Unifi cameras and it did not work. After adding the mac address and applying changes to the US-24-250 switch the camera went offline. That is until I cycled power on the port and when the camera powered back up it went online and worked as expected. Cycling the port power is what I was missing.