topic RE: Want to Block WiFi mac adress in Controller in ExtremeWireless (WiNG)

Want to Block WiFi mac adress in Controller

Prateek_Shukla — Wed, 01 Oct 2014 09:45:00 GMT

I want to block end user's WiFi mac address in WM3400 WiFi , so is there any command or option for the same ?

RE: Want to Block WiFi mac adress in Controller

Doug — Wed, 08 Oct 2014 16:56:00 GMT

It looks like this can be done via MAC Firewall rules.

MAC Firewall Rules “Firewall”
The ability to allow or deny client access by MAC address ensures malicious or unwanted users are unable to bypass security filters. Firewall rules can use one of the three following actions based on a rule criteria:

● Allow a connection
● Allow a connection only if it is secured through the MAC firewall security
● Block a connection

To view MAC firewall rules:
1 Select the Statistics menu from the Web UI.
2 Select a Wireless Controller node from the left navigation pane.
3 Select Firewall > MAC Firewall Rules from the left-hand side of the controller UI

Reference Manual: http://extrcdn.extremenetworks.com/wp-content/uploads/2014/01/WM3000SystemReferenceGuide_5.2.pdf Page 469

RE: Want to Block WiFi mac adress in Controller

dflouret — Wed, 15 Oct 2014 20:34:00 GMT

Or you may want to look at Association ACLs (same reference as above, page 294).

An Association ACL affords a system administrator the ability to grant or restrict client access by specifying a wireless client MAC address or range of MAC addresses to either include or exclude from controller connectivity.

RE: Want to Block WiFi mac adress in Controller

Raghupathy__Kar — Wed, 06 Jan 2016 12:08:00 GMT

Hi Prateek,

Please use the below KCS article for blocking Wireless Client.

https://gtacknowledge.extremenetworks.com/articles/How_To/How-To-Blacklist-a-Wireless-Client-In-Summ...

RE: Want to Block WiFi mac adress in Controller

Ryan_Mathews — Wed, 06 Jan 2016 12:08:00 GMT

This article didn't exist last year when this topic came to life on the Hub. We've improved a great deal over the last year in that regard.

Great job synching it up Karthik. Those users that may look for this in the future will appreciate it.