Is it possible to isolate a network device from the rest of the LAN via its MAC address ?

Im familiar with creating a VLAN based on a tagged port of the network switch, but is it possible by recognising the devices MAC address ?

  • If using (certain) Cisco devices you can implement MAC address based Access Control Lists. I don't know about other brands but I'm assuming they have something similar. – joeqwerty Sep 23 '17 at 21:58

Yes, MAC based vLANs are possible. It depends on your switch's capabilities. You create a MAC address to vLAN map.

Here's an example of a Netgear and Cisco has it too, as well as many others I'm sure.


  • Thanks @Appleoddity would it depend on the switch or the router ? We tend to have a mix of netgear switches and draytek routers – sam Sep 23 '17 at 21:38
  • Yes, that is exactly what it depends on. – Appleoddity Sep 23 '17 at 21:40
  • The isolation must be an the uplink device the MAC is connected to, most likely that's the switch. – Zac67 Sep 24 '17 at 8:08
  • Thanks Zac. I think I misunderstood the question. Yes, it is configured on whatever device the computer plugs in to. – Appleoddity Sep 24 '17 at 12:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.