Want to Block WiFi mac adress in Controller

  • 0
  • 1
  • Question
  • Updated 3 years ago
  • Answered
I want to block end user's WiFi mac address in WM3400 WiFi , so is there any command or option for the same ?
Photo of Prateek Shukla

Prateek Shukla

  • 80 Points 75 badge 2x thumb

Posted 4 years ago

  • 0
  • 1
Photo of Doug Hyde

Doug Hyde, Technical Support Manager

  • 20,710 Points 20k badge 2x thumb
It looks like this can be done via MAC Firewall rules. 

MAC Firewall Rules “Firewall”
The ability to allow or deny client access by MAC address ensures malicious or unwanted users are unable to bypass security filters. Firewall rules can use one of the three following actions based on a rule criteria:

● Allow a connection
● Allow a connection only if it is secured through the MAC firewall security
● Block a connection

To view MAC firewall rules:
1 Select the Statistics menu from the Web UI. 
2 Select a Wireless Controller node from the left navigation pane. 
3 Select Firewall > MAC Firewall Rules from the left-hand side of the controller UI

Reference Manual: http://extrcdn.extremenetworks.com/wp-content/uploads/2014/01/WM3000SystemReferenceGuide_5.2.pdf Page 469
Photo of Daniel Flouret

Daniel Flouret, Employee

  • 7,470 Points 5k badge 2x thumb
Or you may want to look at Association ACLs (same reference as above, page 294).

An Association ACL affords a system administrator the ability to grant or restrict client access by specifying a wireless client MAC address or range of MAC addresses to either include or exclude from controller connectivity.
Photo of Raghupathy, Karthik Jayaraman

Raghupathy, Karthik Jayaraman, Employee

  • 230 Points 100 badge 2x thumb
Hi Prateek,

Please use the below KCS article for blocking Wireless Client.


Photo of Ryan Mathews

Ryan Mathews, Alum

  • 8,988 Points 5k badge 2x thumb
This article didn't exist last year when this topic came to life on the Hub.  We've improved a great deal over the last year in that regard.

Great job synching it up Karthik.  Those users that may look for this in the future will appreciate it.