topic Re: I simply want to create a list of mac addresses that will be blocked on all access points. We have hive manager Enterprise 6.6r1 in Aerohive Migrated Content

I simply want to create a list of mac addresses that will be blocked on all access points. We have hive manager Enterprise 6.6r1

Jeff_Dantzler — Tue, 04 Dec 2018 03:53:05 GMT

I simply want to create a list of mac addresses that will be blocked on all access points. We have hive manager Enterprise 6.6r1

Re: I simply want to create a list of mac addresses that will be blocked on all access points. We have hive manager Enterprise 6.6r1

samantha_lynn — Tue, 04 Dec 2018 04:51:59 GMT

You can do this by going to Configuration> Open the Network Policy> Open the User Profile> Create a MAC Firewall, set all of the MAC addresses you want to block to "DENY", and have the finally rule set to any MAC> Any destination> Allow. The firewall will apply the rules in order, so if the MAC address matches any you've set to deny, the AP will deny them. If the MAC doesn't match any on the list, it will then be allowed to connect. You want to keep the default action for the firewall in general to "PERMIT" as well so as not to block all traffic.

I will say that we recommend using a content filter or firewall for larger MAC filter lists. The APs are not designed to be firewalls; they have some features for small, targeted firewall applications but for larger operations you'd want to use a firewall or content filter.

Re: I simply want to create a list of mac addresses that will be blocked on all access points. We have hive manager Enterprise 6.6r1

d_thomas — Mon, 11 Mar 2019 23:14:16 GMT

I am using Hive manager software version 8.2r2c with AP121 firmware 6.5r2, can I upgrade to a later version of the firmware to allow me to use the MAC firewall policy. It would appear there is a requirement to have HiveOS 6.7r2 or later in order to use the Firewall policy to block devices.

Re: I simply want to create a list of mac addresses that will be blocked on all access points. We have hive manager Enterprise 6.6r1

samantha_lynn — Mon, 11 Mar 2019 23:17:46 GMT

You would want to update the firmware version, I would recommend 6.5r12 at the moment.

Re: I simply want to create a list of mac addresses that will be blocked on all access points. We have hive manager Enterprise 6.6r1

d_thomas — Tue, 12 Mar 2019 17:29:09 GMT

Many thanks for your response. I followed your recommendation above to block individual and multiple Mac addresses, however it does not appear to work. I can Deny all access but seem unable to deny selected mac addresses. can you point me to a step by step guide..

Thanks again.

Re: I simply want to create a list of mac addresses that will be blocked on all access points. We have hive manager Enterprise 6.6r1

samantha_lynn — Tue, 12 Mar 2019 19:57:05 GMT

Of course, this guide will walk you through creating a MAC firewall object in Classic- (Edited for new link address) https://thehivecommunity.aerohive.com/s/article/How-To-Create-MAC-Firewall-Rules-in-HiveManager-Classic

If you find it is not applying correctly, you may want to open a technical support case to look in to that.

Re: I simply want to create a list of mac addresses that will be blocked on all access points. We have hive manager Enterprise 6.6r1

rickywong — Wed, 17 Apr 2019 18:19:52 GMT

Seeme the link dead, any update one?

Re: I simply want to create a list of mac addresses that will be blocked on all access points. We have hive manager Enterprise 6.6r1

samantha_lynn — Wed, 17 Apr 2019 20:12:32 GMT

Sorry about that, we're adjusting our naming scheme for a new documentation system we're launching soon, the new link is- https://thehivecommunity.aerohive.com/s/article/How-To-Create-MAC-Firewall-Rules-in-HiveManager-Classic