topic Re: Block client MAC on VLAN in Wireless

Block client MAC on VLAN

MicronasPICA — Sun, 04 Jul 2021 01:34:42 GMT

Hi,

I have a WLC 4402 configured with two VLANs (Company and GuestNet).

Now I need to block a client on the GuestNet VLAN only using its MAC address.

The access to the company WLAN should still be permitted.

What is the easiest way to configure this?

Thanks in advance!

Best regards,

Chris

Re: Block client MAC on VLAN

Peter Nugent — Thu, 04 Mar 2010 11:15:13 GMT

Not sure you can do this on the WLC as far as I know its only IP ACLs. Only ever used mac filters to authenticate not deny access.

However you caould apply a MAC ACL on the switch, or if its an internal client inform him of the security policies and tell him to stop being naughty!

Re: Block client MAC on VLAN

Scott Fella — Sat, 06 Mar 2010 16:36:46 GMT

Agreed... you can create an ACL to block a MAC on the switch level, but not on the WLC. I'm guessing you are doing either open access to the guest or web pass-through. Using these type of guest access can't prevent any other users to access your guest net. Maybe you should look at doing Web-Auth, unless you are doing this now and you have one person who has access.... but then again, you can always change the username/password.