topic Block Randomised MAC Addresses on a particular SSID in ExtremeWireless (General)

Block Randomised MAC Addresses on a particular SSID

ExtremeNewbie — Thu, 17 Sep 2026 14:20:09 GMT

Hello Community,

I have an SSID configured in XIQ Cloud that acts as the controller. Is there a way or steps that I can use to block randomised MAC addresses leaving MAC addresses that need access via the SSID.

I have see the MAC OUI/MAC Address section under Common Objects>Basic.

However, I cannot see a way to block randomised MAC addresses using a MAC OUI for example.

Any help gracefully appreciated.

Thanks,

Re: Block Randomised MAC Addresses on a particular SSID

nativi34mean — Fri, 18 Sep 2026 08:30:43 GMT

Hello,

Standard MAC OUI filters won't work out of the box for this because randomized (Locally Administered) MAC addresses don't use a fixed manufacturer OUI—their second hex digit is always 2, 6, A, or E.

Best Regards

Re: Block Randomised MAC Addresses on a particular SSID

dariusmp — Fri, 18 Sep 2026 08:43:17 GMT

Hello,

Extreme doesn't have a way to block randomised MAC addresses in ExtremeCloud. They say that the best option is to block them in the firewall.

"There currently is no option to allow for the creation of Randomized MAC filter is XIQ. It is always recommended that such settings be configured on the corporate firewall instead."

https://extreme-networks.my.site.com/ExtrArticleDetail?an=000110149

However, I know an option that can help you. You can Enable MAC-Based Filters, put the default action in Deny, and then add the MAC addresses that you need to allow.

You can find this option in:

Configure → Network Policies → open your Network Policy → open the SSID → Additional Settings → Optional Settings → Customize → Enable MAC-Based Filters

I have attached a screenshot showing the option.

I hope this helps you!