topic Wi-Fi Access using MAC filtering in Wireless

Wi-Fi Access using MAC filtering

NitinPowar99674 — Thu, 02 Dec 2021 06:27:04 GMT

Hi Experts,

I want to use MAC filtering to access the wireless network. But I don't have a RADIUS server.

Most of the devices are IoT based

So, please guide me on this matter.

In this case, I will be installing MR76

Re: Wi-Fi Access using MAC filtering

MilesMeraki — Thu, 02 Dec 2021 08:02:19 GMT

Don't see how you'd achieve this without a NAC/Radius server? You could look at doing this with IPSK with Radius using Freeradius (open source).

https://documentation.meraki.com/MR/Encryption_and_Authentication/IPSK_with_RADIUS_Authentication

Re: Wi-Fi Access using MAC filtering

Karsten Iwen — Thu, 02 Dec 2021 10:34:47 GMT

As mentioned, RADIUS is needed for that. But as MAC-filtering will not add any security benefit, I would go for "Identity PSK without RADIUS" to give different groups of IoT devices different PSKs and group-policies.

Re: Wi-Fi Access using MAC filtering

NitinPowar99674 — Thu, 02 Dec 2021 13:26:56 GMT

Thanks for your reply.

I want to give some details of my ongoing deployment.

We use one subnet for all wired and wireless networks so all users including IoT are in one subnet.

All IoT devices use only a wireless network and other users connected on the wire.

So please advise, how can I implement these policies?

Re: Wi-Fi Access using MAC filtering

Karsten Iwen — Thu, 02 Dec 2021 13:31:05 GMT

Would still go for "Identity PSK without RADIUS".

Re: Wi-Fi Access using MAC filtering

BlakeRichardson — Thu, 02 Dec 2021 18:59:03 GMT

@NitinPowar99674 Meraki doesn't support the use of MAC filtering without using Radius. Radius is a requirement, if you don't have a radius server your options are set one up or choose a different authentication method.

Re: Wi-Fi Access using MAC filtering

CMR — Thu, 02 Dec 2021 20:18:28 GMT

@NitinPowar99674 that isn't great from a security point of view IoT devices are notoriously (insert favourite expletive) in terms of updates and general security so I'd look to change to a different setup where you use VLANs and can secure IoT devices off from the rest of the network.