Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/21.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=intrusion-prevention-DOS-trusted-MAC-address-import

Import trusted MAC addresses

You can import .csv or .txt files containing trusted MAC addresses and IP addresses. The firewall uses these MAC addresses and IP-MAC pairs to allow traffic based on the spoof protection general settings you specify.

  1. Go to Intrusion prevention > DoS & spoof protection.
  2. Scroll to Spoof protection trusted MAC and click Import.

  3. Click Browse and select the .csv or .txt file. It must meet the following requirements:

    • The first row must contain all the following headings in this format:

      MAC Address,IP Association,IP Address

    • You must enter values for MAC address and IP association.

    • Enter the IP association value from the following options:

      • Static: Enter the IP addresses in comma-separated format. You can enter a maximum of 16 IP addresses.
      • DHCP
      • DHCPv6
      • None

    Note

    The firewall discards entries that contain an invalid MAC address, IP association, or IP address.

    It also discards IP addresses that you enter for IP association set to DHCP, DHCPv6, or none.

  4. Click Upload file.

    An example file is as follows:

    MAC Address,IP Association,IP Address
22:33:22:33:22:33,Static,2001::23,2001::24
22:33:22:33:22:33,Static,10.102.12.3,10.102.12.4
12:23:34:12:34:45,DHCP
23:34:21:34:21:67,DHCPv6
67:54:56:67:23:12,None
22:22:22:22:22:33,Static,1.2.3.4,2.3.4.5
33:22:22:12:22:13,Static,13.23.3.34,12.13.14.15