XG Firewall

Moved to the correct Forum.

Hello!

Some questions first:

1. Is there any L3 switch in front of the "PC-Norman"?
2. Can the Firewall can see the "PC-Norman" MAC-Address correctly?
3. Is there any other "Accept" Rule above the "Drop" Rule?

Otherwise since you're a Home User, I recommend you to use IP-MAC Filtering (if necessary) with Clientless Users and Static DHCP mapping.

Moved to the correct Forum.

Hello!

Some questions first:

1. Is there any L3 switch in front of the "PC-Norman"?
2. Can the Firewall can see the "PC-Norman" MAC-Address correctly?
3. Is there any other "Accept" Rule above the "Drop" Rule?

Otherwise since you're a Home User, I recommend you to use IP-MAC Filtering (if necessary) with Clientless Users and Static DHCP mapping.

Hello!

on question 1: No

on question 2: I think yes, i see the MAC-Adress in the IPv4 lease overview

on question 3: I think no - i have only 2 rules. The first - is the "block" rule - the second the allow... 

What I don't understand - why is the rule displayed as not used?

Thank you!

If the firewall has 0 Bytes, it basically do not hit. That means , the filter criteria, you selected, are not applied to the Client traffic. 

I assume this PC-Norman does not have a correct MAC and/or the client traffic does not look like this.

Basically move to clientless user anyway. Give the Client a static IP via DHCP, map the IP to the User and use the User in Firewall rules. 

Hello,

I think i have the right mac. With the IP ist works!

Thanks a lot..

IP is something different compared by the MACs. Copy paste the MAC from the DHCP Server and try again. 

This with the IP is quite sufficient for my purposes. Thank you and happy Easter!