Want to Block WiFi mac adress in Controller

[Prateek_Shukla]

I want to block end user's WiFi mac address in WM3400 WiFi , so is there any command or option for the same ?

[Raghupathy__Kar]

Hi Prateek,

Please use the below KCS article for blocking Wireless Client.

https://gtacknowledge.extremenetworks.com/articles/How_To/How-To-Blacklist-a-Wireless-Client-In-Summ...

[Ryan_Mathews]

This article didn't exist last year when this topic came to life on the Hub. We've improved a great deal over the last year in that regard.

Great job synching it up Karthik. Those users that may look for this in the future will appreciate it.

[dflouret]

Or you may want to look at Association ACLs (same reference as above, page 294).

An Association ACL affords a system administrator the ability to grant or restrict client access by specifying a wireless client MAC address or range of MAC addresses to either include or exclude from controller connectivity.

[Doug]

It looks like this can be done via MAC Firewall rules.

MAC Firewall Rules “Firewall”
The ability to allow or deny client access by MAC address ensures malicious or unwanted users are unable to bypass security filters. Firewall rules can use one of the three following actions based on a rule criteria:

● Allow a connection
● Allow a connection only if it is secured through the MAC firewall security
● Block a connection

To view MAC firewall rules:
1 Select the Statistics menu from the Web UI.
2 Select a Wireless Controller node from the left navigation pane.
3 Select Firewall > MAC Firewall Rules from the left-hand side of the controller UI

Reference Manual: http://extrcdn.extremenetworks.com/wp-content/uploads/2014/01/WM3000SystemReferenceGuide_5.2.pdf Page 469