How do I properly configure the whitelist (MAC filter) on a TP-Link TL-WR842N (ru) version 5 router?
I’m trying to set up the access control function on my new TP-Link TL-WR842N (ru) version 5 router, but the whitelist isn’t working as I expected. When I open the ‘Access Control’ section, add MAC addresses of devices to the whitelist, expecting that only these devices will be able to connect to the network (as it works in Ubiquiti), the router still allows all devices to pass through.
What is the actual function of the whitelist in this router? Is it only intended for blocking access to the router’s web interface?
Additional information: The blacklist works correctly, blocking devices with specified MAC addresses. The router is new, straight out of the box.
Setting up MAC Filtering (Whitelist) in TP-Link TL-WR842N Version 5
Setting up MAC filtering (whitelist) in TP-Link TL-WR842N version 5 requires proper activation of several related functions - you need to enable the MAC filter itself, set the filtering type to “Allow only listed devices” and verify that the filtering mode corresponds to the whitelist. The whitelist should indeed restrict access to the entire Wi-Fi network, not just to the router’s web interface, and its incorrect operation is usually associated with incorrect filtering mode settings or activation of other conflicting functions.
Table of Contents
- Basic Principles of MAC Filtering in TP-Link TL-WR842N
- Step-by-Step Whitelist Setup
- Testing and Troubleshooting
- Whitelist Features in Different Operating Modes
- Alternative Access Control Methods
Basic Principles of MAC Filtering in TP-Link TL-WR842N
MAC filtering in TP-Link TL-WR842N routers works at the network access level and can be configured for both whitelist and blacklist. It’s important to understand that a whitelist should only allow connection of devices with specified MAC addresses, while a blacklist blocks devices with listed MAC addresses.
Key principles:
- MAC filtering operates at OSI model layer 2 (data link layer)
- Filtering is applied to wireless and/or wired connections depending on settings
- For proper whitelist operation, the corresponding filtering mode must be activated
- In whitelist mode, all devices not on the list should be automatically blocked
Step-by-Step Whitelist Setup
Step 1: Connecting to the router’s web interface
- Connect to the router’s Wi-Fi network or use an Ethernet cable
- Open a browser and enter the address
tplinkwifi.netor192.168.0.1 - Enter the username and password (default: admin/admin)
Step 2: Setting up MAC filtering
- Go to the “Access Control” section in the settings menu
- Click on the “MAC Filter” tab
- Activate the “Enable MAC Filter” function
Step 3: Setting up the filtering type
- In the “Filter Type” field, select “Allow Listed” (Allow only listed devices)
- Important: Make sure this mode is selected, not “Deny Listed”
Step 4: Adding MAC addresses to the whitelist
- In the “MAC Address” section, enter the device’s MAC address
- In the “Description” field, specify the device name for convenience
- Click “Add” to include the device in the list
- Repeat for all devices that should have network access
Step 5: Saving settings
- Click “Save” at the bottom of the page
- Confirm the settings save
- Restart the router to apply changes (sometimes required)
Testing and Troubleshooting
Possible reasons for whitelist malfunction:
1. Incorrect filtering mode
- Verify that “Allow Listed” mode is selected
- Ensure that “Deny Listed” mode is not activated
2. Conflicting settings
- Disable other access control functions such as parental control
- Check that “Guest Network” function with separate settings is not enabled
3. MAC address determination issues
- Ensure MAC addresses are entered correctly (format: XX:XX:XX:XX:XX:XX)
- Verify you’re using the device’s physical MAC address, not a virtual one
4. MAC filtering disabled for specific interfaces
- In some firmware versions, filtering can be configured separately for Wi-Fi and LAN
- Check that filtering is active for the required interfaces
Verifying proper operation:
- After setup, try connecting a device whose MAC is not on the list
- The device should not be able to connect to the network
- Connect a device from the list - it should successfully connect
Whitelist Features in Different Operating Modes
Filtering modes in TP-Link TL-WR842N:
1. Allow Listed (Allow only listed devices)
- Function: Blocks all devices except those specified in the list
- Usage: Ideal for whitelist
- Priority: Highest security level
2. Deny Listed (Deny listed devices)
- Function: Allows all connections except for blocked devices
- Usage: For blacklist
- Priority: Basic security level
3. Hybrid modes
- Some firmware versions allow combining with other access rules
- Check for additional settings in the “Advanced Settings” section
Version 5 features:
- Version 5 has an updated management interface
- Added ability to export/import MAC address lists
- Improved compatibility with modern devices
Alternative Access Control Methods
If MAC filtering is not working properly, you can use the following alternative methods:
1. Parental Control
- Go to the “Parental Control” section
- Create rules for specific devices
- Restrict access by time or content type
2. Guest Network
- Create a separate guest network
- Restrict access to the main network
- Set password and expiration date for the guest network
3. IP Filtering
- Use static IP addresses for allowed devices
- Configure DHCP server with limited address range
- Use firewall functions to block unwanted IPs
4. “Devices” Function
- In the “Devices” section, view all connected devices
- You can block individual devices by their IP or MAC
- Use the “Disable” function for unwanted devices
Sources
- Official TP-Link Documentation - MAC Filtering Setup
- TP-Link TL-WR842N User Guide
- TP-Link Router Security Settings Configuration Guide
- TP-Link Support Forum - MAC Filtering Discussion
- Article on Access Control Methods in Home Networks
Conclusion
Proper whitelist configuration in TP-Link TL-WR842N version 5 requires careful completion of several steps: activating the MAC filtering function, selecting the correct “Allow Listed” mode, and thoroughly adding MAC addresses of all allowed devices. If after setup the whitelist continues to allow all devices, check for conflicting settings and correct MAC address entry. For maximum security, it’s recommended to combine MAC filtering with other access control methods such as parental control and guest network. When encountering complex issues, always refer to the official TP-Link documentation or contact the manufacturer’s technical support.