speaking of NAS, is there a setup where it could MAC Filter users?
and to make it more convenient, the MAC Filter could apply to select HDDs, some of which isn't filtered at all.
i haven't heard of this type of feature on NASes.
multiple HDDs that aren't nested, having a few HDDs strictly protected and isolated from non-whitelisted guests.
No. the only way you could even begin to do that is running vlans or IPSEC but even then its a take it or leave it as there is no low level request for a share name for either of them to catch. My network is like so. I have my NAS unit running on my 10GBit side. My kids computers are on VLAN20,Guest WIFI is VLAN30, Adult computers and media players are VLAN10. VLAN10 can access all NAS ports both in/out all day every day. VLAN20 can only access my PLEX port and it is set to only allow between certain hours. VLAN30 can not reach the NAS at all. That is how you do network level segmentation.
With NFS you can do IP address sharing its not mac filtering but it filters by ip address like so
/share/Media 192.168.0.3(rw,sync) - this says computer 192.168.0.3 can read/write to the Media Share and no one else
/share/Media2 192.168.0.*(rw,sync) - this says all computers on 192.168.0.? can access Media2
If you are doing Samba/windows shares
Then its all by user name
/share/Media you would give access to say username:admin password: onlyIknow then only people with the username/pass can access
/share/Media2 you would give guest user permission anyone can access with no username/password
its not Correct but you should be able to cheat for NFS
Say you have guest wifi that you dont want to access shares have the guest wifi be assigned ip range 192.168.0.63 or above this assigns IP address then in your NFS do
/share/Media2 192.168.0.1/26 (rw,sync) - this says all computers with ip address 192.168.0.1-192.168.0.62 can access this share
/share/Media 192.168.0.1/24 (rw,sync) - This says all computers with ip address 192.168.0.1-192.168.0.254 can access this share.