Attention, a star deduction, because the thing under certain circumstances may pose a security hole: If you have WiFi (of course in addition to encryption) with a MAC filter "hedged" and then bind the Repeater into the grid (and adds naturally his MAC in the List of FB a) may then all devices that log in to the repeater without MAC filter directly into the net. The repeater has again its own list, which must be maintained (and defaults to "accept all" is). Basically, that's also ok so (technically probably only feasible consuming that it takes over the list of the FB), but it should give somewhere either in the SA or when setting via the web interface a clear indication.