How to block/disconnect unwanted clients from Aironet 2800

[Melotto]

Hello,

We have a few Aironet 2800 on our company and 2 networks configured, internal and guests.

Happens that we want to move some internal users to the guest network and, beside asking politely through email, some of them have not switched to guests.

I cannot find documentation neither google search it, to drop those users or maybe block them to use the internal network, through the GUI Cisco interface.

Is there a way to perform this through GUI or only by physically connecting and using the CLI?

*We dont want to change the password to achieve this.

[Flavio Miranda · Accepted solution]

Hi

 Try mac filter.

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/91901-mac-filters-wlcs-config.html#CLI-Config 

[Melotto]

Hi Flavio, thank you for your suggestion.

It seems that the MAC filtering from that article is to add MAC addresses to the wlan which would do but for us there would be much more work involved so, based on that article I was able to find another one to block mac address.

Thank you.

[Rich R]

Remember MAC addresses can easily be spoofed so that is not a secure approach (easily bypassed).

Moreover most modern devices/OS use dynamic (private) MAC address so the MAC can change without the user doing anything.

If you want a secure corporate WLAN you need to use 802.1x with user/device authentication to a radius or other AAA server.