DHCP: MAC Address Policies vs MAC Address Filters

InfoTechdude 156 Reputation points
2020-10-16T15:25:17.563+00:00

Hi,

I wonder what is the difference between using MAC Address Policies vs MAC Address Filters? Are these the same or different? In filters you can block or allow only certain devices by their macs.

32993-picture.png

Windows Server 2012
Windows Server 2012
A Microsoft server operating system that supports enterprise-level management, data storage, applications, and communications.
1,571 questions
Windows DHCP
Windows DHCP
Windows: A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.DHCP: Dynamic Host Configuration Protocol (DHCP). A communications protocol that lets network administrators manage centrally and automate the assignment of Internet Protocol (IP) addresses in an organization's network.
1,035 questions
{count} votes

Accepted answer
  1. Gloria Gu 3,896 Reputation points
    2020-10-19T03:19:41.203+00:00

    @InfoTechdude Hi,

    Thank you for posting in Q&A!

    1.MAC Address Policies, Please refer to:dn425040(v=ws.11)
    This feature enabled restriction of network access to DHCP clients based on their MAC address. It can be achieved both at the scope level and server level since server 2012.(The scope level is prior to the server leve)

    33213-58.png

    1. MAC Address Filters:Please refer to: 25665.how-to-enable-and-configure-dhcp-mac-address-filtering.aspx
      Network Administrators can filter the assigning of IP addresses from the DHCP server on the basis of MAC addresses. On DHCP server, both allow and deny list can be configured separately.

    3.The difference between them:

    There doesn't exist the offical documents regarding the difference between them, but I've done tests in my own environment. Following are my configurations and results :
    (1) Set a MAC Address Policies to enable the client's MAC address
    (2) Set a MAC Address Filters to disable the client's MAC address
    (3) The client was blocked from getting an IP lease from the DHCP server
    (4) Conclusion: When both configuring these two features, the priority of MAC Address Filters> MAC Address Policies

    33148-55.png
    33129-56.png
    33202-57.png

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


0 additional answers

Sort by: Most helpful