Mac Address Restriction allows users to log in on the On-Prem app using specified devices that are allowed by the team. This is done by enabling MAC Address Restrction and adding those devices to the allowing mac address list.
Mac Address Restriction is available as an addon on request. Contact Sales for more info.
Requirements:
Windows, Mac, iOS and Android
On-Prem App version 3.5.8.0 or later
Get Started:
Log into your Splashtop Gateway with the team owner account and go to Management > General Settings > Management > Enable Splashtop On-Prem Client access with MAC address restrictions
It is off by default, turn it on to edit Detailed Settings
There are three action settings for user control, and all action settings are set to "off" by default.
- Ignore MAC address restrictions for the devices currently in the device list: Enable to allow already logged-in devices to ignore MAC address restrictions. Check your already logged in devices from the device list link.
- Ingore MAC address restrictions for mobile devices: Disable to block all mobile devices because MAC address is forbidden to obtain from mobile device.
- Ignore device authentication when MAC address restriction is enabled: Enable to allow device with below MAC addresses to ignore device authentication. It is strongly recommended to enable 2-step verification if this option is enabled.
Edit Your Mac Address List
Splashtop Gateway adapts IEEE 802 standard format
-
- Must be 6 groups of 2 hex digits
- Case insensitive
- Max 20,000 mac address
-
Octets in a MAC address can be separated by a colon, a hypen or mixed
- Allow input 0A-1B-2C-3A-44-5C (separated by hyphen)
- Allow input 0a:1b:2c:3a:44:5c (separated by colon)
- Allow input case insensitive 0a:1B:2C:3a:44:5c or 00-1B-2C-3a-44-5c or 00:0A-83:b2:C0:8e
Import
-
Supported import file type: CSV
-
Case insensitive
-
Default - adding imported addresses as new MAC addresses
- Max supported CSV file size: 5MB
- Max supported mac addresses: 20,000
-
Action setting - Clear all current MAC addresses then update
1. Imported addresses override the existing list, so only the imported addresses are left.
2. Pop-up reminder when this setting is checked
Export
file name - mac_address_%date.csv
e.g. mac_address_20230214.csv
On-Prem App Troubleshooting
If the MAC address restriction feature is enforced, there are responding error messages in various situations.
-
When the SRC version is lower than 3580
-> Cannot log in because MAC address restriction has been enabled and your client app version does not support it. Please update your client app. -
When the Mac address of the user device isn’t in the MAC address list
-> Cannot log in because the MAC address you are logging in from has been blocked by MAC address restrictions. -
When mobile devices are rejected
-> Cannot log in because MAC address restrictions have been enabled and the mobile devices are blocked. - When the MAC address of the user device is in the MAC address list and Cannot log in to On-Prem app
-> If you are using macOS, after upgrading your macOS to Sequoia, network features may prevent you from logging in. There are three options, please check your Wi-Fi Options. Make sure your option is OFF/FIXED and the MAC address has been added to MAC address list.-
OFF: Sends the device’s real physical MAC address. This mode does not enable any MAC address randomization and is the traditional way of connecting to networks.
-
FIXED: Sends a fake MAC address, but this address remains consistent when connecting to the same network. This mode offers privacy protection while avoiding issues caused by frequently changing MAC addresses, such as firewalls or network authentication.
-
ROTATING: Sends a different random MAC address. This mode provides the highest level of privacy protection but can lead to problems.
-
Feedback
Unable to get Mac Address Restriction to work or do have suggestions for us? Please open a support ticket.
