Prevent MAC addresses from DHCP

[kmkrause2]

I have a WLC 5508 with several WLANs, one of which is a guest network. I want to be able to prevent company computers, identified by MAC address from pulling DHCP from the guest network WLAN (DHCP server on the WLC is enabled and working fine). Some of our users mistake the guest network SSID for the corporate network SSID. They get an IP from the guest network and can access the internet but not corporate assets. They get irritated and I get a call...

I want to be able to prevent those computers from obtaining an IP at all from the guest network DHCP. How can I do that on the WLC 5508?

Thanks

[Flavio Miranda]

Hi

   I´d say it is possible but looks like you have a quite simple environment, right?  

  There are wIPS solutions that allows specific devices to connect on specific SSIDs only and this control is done on the air interface. 

-If I helped you somehow, please, rate it as useful.-

[kmkrause2]

Thanks for the response. Actually, it's a fairly complex environment. I just need to know if I can apply a "reverse" MAC filter on our guest network. We have a MAC filter on the corporate wlan which lists the MAC addresses of all wireless devices owned by the company and therefore, allowed to access the corporate wlan. I need to know if I can apply the same list of MAC addresses to the guest wlan, but instead of allowing access, I want to prevent access by these devices.

Thanks

[patoberli]

Newer WLC versions will not anymore offer DHCP server on the WLC itself. For that reason I suggest you get another DHCP server solution (there are free ones running under Linux, for example). With those DHCP servers you can then create block lists typically.

[kmkrause2]

Thanks, when you talk about newer versions, are you referring to software updates or entirely new physical devices? Ours was purchased in 2014.

[patoberli]

I'm not entirely sure about the whole platform. I do know that the WLC 5520 doesn't anymore offer a DHCP Server feature though.