03-04-2010 01:27 AM - edited 07-03-2021 06:34 PM
Hi,
I have a WLC 4402 configured with two VLANs (Company and GuestNet).
Now I need to block a client on the GuestNet VLAN only using its MAC address.
The access to the company WLAN should still be permitted.
What is the easiest way to configure this?
Thanks in advance!
Best regards,
Chris
03-04-2010 03:15 AM
Not sure you can do this on the WLC as far as I know its only IP ACLs. Only ever used mac filters to authenticate not deny access.
However you caould apply a MAC ACL on the switch, or if its an internal client inform him of the security policies and tell him to stop being naughty!
03-06-2010 08:36 AM
Agreed... you can create an ACL to block a MAC on the switch level, but not on the WLC. I'm guessing you are doing either open access to the guest or web pass-through. Using these type of guest access can't prevent any other users to access your guest net. Maybe you should look at doing Web-Auth, unless you are doing this now and you have one person who has access.... but then again, you can always change the username/password.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide