My phone can still connect to a router when its MAC address has been added to the router's blocklist

My phone can still connect to a router when its MAC address has been added to the router's blocklist

Problem:

The MAC address of a phone has been added to a router's blocklist, but it can still connect to the router.

Cause:

When your phone is connected to a hotspot for the first time, a randomized MAC address is allocated, which can be queried in the detailed connection information of the hotspot. If you've added this MAC address to the blocklist and connect your phone to the hotspot again, your phone will still be able to access this hotspot using its device MAC address. In this case, the MAC address in the detailed connection information of the hotspot is its device MAC address (even though it is indicated as randomized).

Solution:

Add both the randomized MAC address and the device MAC address of your phone to the router's blocklist.
Please turn off the random MAC address function of the phone and always use the real MAC address for Wi-Fi. In addition, add the real MAC to the blocklist on the router.