{"id":7442,"date":"2021-02-20T19:58:33","date_gmt":"2021-02-20T19:58:33","guid":{"rendered":"https:\/\/www.use-snip.com\/kb\/?post_type=ht_kb&#038;p=7442"},"modified":"2022-10-19T14:43:38","modified_gmt":"2022-10-19T14:43:38","slug":"restricting-users-by-mac","status":"publish","type":"ht_kb","link":"https:\/\/www.use-snip.com\/kb\/knowledge-base\/restricting-users-by-mac\/","title":{"rendered":"Restricting Users, by MAC"},"content":{"rendered":"<p>This article describes how to add a <strong>MAC Restriction<\/strong> to user accounts in the <span style=\"color: #0000ff;\"><strong>SNIP<\/strong><\/span> NTRIP Caster.<\/p>\n<h2>The MAC Address Restrictions tab<\/h2>\n<p>This tab is used to control which MAC Addresses the user&#8217;s NTRIP Client software is allowed to connect with.\u00a0 Use this feature to restrict which network cards this <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/adding-user-accounts\/\" target=\"_blank\" rel=\"noopener\">User Account<\/a> can use to connect to your Caster.<\/p>\n<p>When using this restriction it is important to recall that the MAC address of a TCP packet is replaced as the packet flows along the internet to the <span style=\"color: #0000ff;\"><strong>SNIP<\/strong><\/span> Caster.\u00a0 This is in contrast to the IP address which reflects the public IP from which the connection first originated (unless spoofed).\u00a0 The MAC addresses which you will see reflect the various local devices on the same local sub-net as <span style=\"color: #0000ff;\"><strong>SNIP<\/strong><\/span>.\u00a0 Hence this feature is best used to <em>prevent<\/em> or <em>allow <\/em><span style=\"color: #0000ff;\"><strong>SNIP<\/strong><\/span> connection traffic from any local gateways, routers, and devices as required.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7445\" src=\"https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/macTab.png\" alt=\"\" width=\"600\" height=\"730\" srcset=\"https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/macTab.png 600w, https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/macTab-247x300.png 247w, https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/macTab-41x50.png 41w, https:\/\/www.use-snip.com\/kb\/wp-content\/uploads\/2021\/02\/macTab-320x389.png 320w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p>This tab follows the same layout used with several other restrictions tabs.<\/p>\n<p>When a user with this account connects, the remote MAC address is checked against the Allowed and Prohibited lists, if the <strong>Activate<\/strong> checkbox is enabled.\u00a0\u00a0 If the user is not allowed to connect due to this restriction, an entry in the console log is added to inform the operator.<\/p>\n<p>The tool-tip for entries displays the IP address which is associated with this MAC address (as show in the image above). During setup, keep in mind that these values may have have a different public facing IP value which has been port forwarded to it as well.<\/p>\n<p>The <strong>Add&#8230;<\/strong> buttons presents the operators with a way to add any valid MAC value.\u00a0 A combo list is populated with the MAC addresses that have been seen by the Caster.\u00a0 A similar tool tip for these entries also displays the IP address\u00a0 associated with each MAC address.<\/p>\n<h3>Notes:<\/h3>\n<ul>\n<li>Not all network devices have a MAC address. Connections without a MAC address are not filtered by this restriction.<\/li>\n<li><span style=\"color: #0000ff;\"><strong>SNIP<\/strong><\/span> now supports and uses the &#8220;X-MAC&#8221; http header keyword in NTRIP Client connections.\u00a0 But at this time very few NTRIP Clients send this value.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p style=\"padding-left: 80px;\"><span style=\"color: #008000;\"><strong> Note:<\/strong><\/span>\u00a0 The <strong>MAC Address Restrictions<\/strong> tab is an advanced feature. It requires a <span style=\"color: #993300;\"><em><strong>Pro<\/strong> <\/em><\/span>license\u00a0 and depends on the presences of an active \u201cEnhanced User Management\u201d Plug-In to be used.<\/p>\n<p>About other <a href=\"https:\/\/www.use-snip.com\/kb\/knowledge-base\/user-accounts-adding-restrictions\/\">user account restrictions<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This article describes how to add a MAC Restriction to user accounts in the SNIP NTRIP Caster. The MAC Address Restrictions tab This tab is used to control which MAC Addresses the user&#8217;s NTRIP Client software is allowed to connect with.\u00a0 Use this feature to restrict which network cards this [&hellip;]<\/p>\n","protected":false},"author":13,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"ht-kb-category":[283],"ht-kb-tag":[497,496],"class_list":["post-7442","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-managing-user-accounts","ht_kb_tag-mac","ht_kb_tag-restriction"],"_links":{"self":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb\/7442","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/comments?post=7442"}],"version-history":[{"count":10,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb\/7442\/revisions"}],"predecessor-version":[{"id":7600,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb\/7442\/revisions\/7600"}],"wp:attachment":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/media?parent=7442"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb-category?post=7442"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb-tag?post=7442"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}