Lock a device to just one SSID

[andreff92]

Hello, I would like to block a device on just one of my SSIDs. Is this possible? I currently have 4 SSIDs on my controller, and I would like this device to not access just one.

[Saikat Nandy]

There is no mechanism to block that endpoint to connect to only one SSID. You can do manual blacklist but that would be applicable for all the SSIDs. However the SSID where you want to block the endpoint has MAB configured, then you can achieve what you are trying to do.

[MHM Cisco World]

4 SSID use same authc method?

What is l2/l3 authc you use for these wlan?

MHM

[JPavonM]

If it's a Windows device, you can use GPOs to only add the SSID you don't want it to be connected to a DenyList.

https://community.spiceworks.com/t/blacklist-whitelist-wireless-networks-via-group-policy/1011519

[Rich R]

MDM can achieve the same on most managed devices.

[Leo Laohoo]

Can be done with MS Active Directory and policy can be pushed with GPO.

For instance, all our laptops will connect to the CORP SSID at all times.