Blocking certian MAC per specific SSID

[ahmed-hassan1110]

Dear Gents,

I have 5508 WLC running 8.0 SW, multiple SSIDs are configured and each is mapped to a certain VLAN on the network.

I'd like to block certain MAC from connecting to certain SSID on the WLC, using MAC filter doesn't help as it's allow list based and either using disabled clients as it's globally applied and if it's used it will block the MAC from connecting to any SSID which is not desired.

so how to do that on WLC or even on network switches ?

[biaacer2]

Not that I'm aware of. At least not without ISE. 

Why not exclude the client altogether in the manually disabled clients? 

Security->Disabled Clients -> Manual Disable.