what is outgoing and incoming policy in the router setting?

what is incoming/outgoing policy in the router setting? and is there any difference between
incoming/outgoing policy and incoming/outgoing direction?

When I want to configure my router to allow a specific device(s) to connect the Internet
trough my router using its MAC address, is it allowing outgoing or incoming?

what is the difference between source MAC and destination MAC address?

The MAC (Media Access Control) address is a value associated with the network interface
of the device (PC, mobile phone, tablet, IP Camera,etc). On Windows using ipconfig /all the
MAC appears as physical address.
Each device have a unique MAC configured from factory that is unique on the world. So
there is no chance of two devices with the same MAC.

When two devices (for example two PCs) have to communicate on a LAN, they use a
protocol as IP but to access the LAN cable or the wifi they need to use the MAC address. IP
provides a way to make a relation of MAC address and IP, it's called ARP.
On Windows, go to Command Prompt use the command arp -a and you can see a table
that relates IP to MAC.
For example, suppose we have a PC called A with IP 192.168.2.1 and MAC 15-c5 and a
PC called B with IP 192.168.2.2 and MAC 2b-f7.
If A sends data to B, then A takes that data and put it inside an IP Packet with Source IP
address 192.168.2.1 and IP destination address 192.168.2.2. The IP packet is like an
envelope that encapsulates the data.
To access the LAN, the IP Packet must be put inside an Ethernet frame. The Ethernet
frame will use source MAC address 15-c5 and destination MAC address 2b-f7. The ethernet
frame is an external envelope that makes it easy to move frames on the LAN.
It's typical that home routers have a menu that let block source MAC address in a way that
they can't connect to the wifi or to internet.

shareimprove this answer edited Apr 8 '15 at 13:08 answered Mar 6 '15 at 11:18

jcbermu
12.7k23946
Thank you for your answer. so the destination MAC address is always my
is. and i understand that any device use my router to access the Internet is
one? hsawires Mar 6 '15 at 11:33

1 A router has at least two interfaces, so it depends of the

on the LAN interface, incoming frames come from the PCs on LAN and
PCs. jcbermu Mar 6 '15 at 11:38

Thank you so much. hsawires Mar 6 '15 at 11:39

 re the uniqueness in mac addresses, according to the textbooks, yes. But s
answer,superuser.com/questions/268006/ see the 16 million figure in on
in another answer. so 'reasonably unique' would be more accurate. This se
devices with the same MAC." <-- is not correct. barlop

Globe DSL Prolink Router/Modem MAC Filtering - Allow

and Deny
Nowadays our Telcos started offering DSL (Digital Subscriber Line) with monthly
bandwidth limit. Globe is one of the internet service provider that offers this kind of
setup where they only you to consume a limited data that renews every month.
When you apply for their postpaid DSL Broadband plans, watch out how many
gigabytes you can use monthly.

Having this kind of setup makes you think how you can limit internet usage. You may
start thinking about how to block certain websites that consumes huge amount of
data or even allow only devices that you and your family owns.

How to Configure MAC Filtering on Globe Prolink H5004NK

Router

Every Globe subscriber, who applied for wired internet includes a free modem/router
with Wi-Fi capable to connect your wireless devices like smartphones, tablets and
laptops. In this MAC filtering tutorial we are using Prolink H5004NK model but this
concept will also work on other router models (H5001NS). All you need to know is
 the idea on how your router firewall settings or configuration work, especially MAC
Filter options.

How to block devices MAC address:

1. Connect to your router / Wi-Fi, open your browser then access the web UI by
typing 192.168.254.254.
2. Click on Setup then enter Globe router Default Admin credentials username and
password.
3. Go to Firewall tab, look for MAC filter options. Outgoing and Incoming Default
Policy must be set to "Allow".
4. By default policy, settings are configured to allow all MAC address as theres no
rule listed on the filter table.
5. To block a MAC address from accessing the internet, set the following fields:
Direction: Outgoing
Action: Deny
Source MAC: input the MAC address you are trying to block without colon (:)
e.g. 00E076510401

6. Leave Destination MAC blank or empty then click Add. The rule will appear on
Current MAC Filter Table below.

Try to browse using the device with the MAC blocked on the Globe router, it
shouldnt connect to the internet. You can test another device with MAC address not
 listed on deny filter, it should connect to the internet. In this setup, you can control
those devices who eats up your monthly bandwidth allowance.

How to allow only selected MAC Address:

1. Follow above steps 1 to 2, Go to Firewall tab, look for MAC filter options.
2. Set Outgoing Default Policy to Deny and Incoming Default Policy to Allow.
3. To allow only selected MAC address from accessing the internet, set the following
fields:
Direction: Outgoing
Action: Allow
Source MAC: input the MAC addresses want to access the internet (:) e.g.
00E076510401

4. Leave Destination MAC blank or empty then click Add. Repeat again if you want
to add more devices MAC. The rule will appear on Current MAC Filter Table below.

Connect a device that is not listed on your allow only rule, it will not connect to the
internet. Test any devices with MAC address included on allow only rule, it should
connect to the internet. Above settings will apply on both Wi-Fi and LAN
connections.