Sometimes I need to configure the router and choose which devices can connect to my network (MAC address filtering). For example, limit connections to 3 specific machines. But for an advanced user, it is possible to get my MAC address and change it easily (e.g. On a Linux machine using a simple command line
macchanger --mac xx:yy:zz:tt:aa:bb wlan0)
According to gowenfawr, if one of my 3 machines isn't connected, it's possible for an advanced user to reconnect in its place.
To get more security features, what is the right configuration of MAC address filtering: enabled or disabled?