Question about 10.3 Wifi Block/Allow Feature

Note:  I learned recently that it's NOT necessarily true that a device's MAC address will remain static.

I was having trouble getting my Samsung phone to connect to my IFD, and finally figured out that it had a "MAC randomization" setting that defaulted to "on", apparently for privacy/security reasons.  Once I disabled that setting, I was able to see the phone's MAC address properly and allow it permission in the IFD to connect.

_phm_ wrote: From my previous IT Security background, I believe that access control and other security features, especially inside an airplane, are non-negotiable items - it really should be restrictive as possible. Having to fix your device MAC address in order to connect to your panel is a small price to pay.

MAC address is the wrong thing to enforce security by as MAC addresses can easily be changed to look like any other device.

IMHO the proper way would be to use a password on the network, of course passwords are only as secure as the holders of the password keep it.

In my case I have 2 devices with WIFI networks (on two different WiFi channels!!!) the IFD and the NGT-9000.  There is a password on the IFD's network only because it is possible to push flight plans from a tablet to the IFD and the last thing I need is a passenger pilot screwing with their tablet and accidentally push a new flight plan,  this is why I don't give out the password to the IFD.  If my (pilot) passenger wants traffic and weather they are welcome to connect to the NGT-9000, the WiFi on that device is open and the WiFi is a transmit only meaning that it ignores anything you send to the NGT-9000.

-PA