Block device by manufacturer in MX network

[MarcP]

Hi all,

Within a MX-only network, is there a way to block devices by its manufacturer automatically?

As we have no HP devices in our company I would like to block these (external technicians have them) devices instantly, when they connect theirselfs to the MX (they just want to check the internetconnection, but I don´t want them in our networks at any time).

Thanks, regards

Marc

[PhilipDAth]

If you have a typical configuration with unauthenticated ports - you can't block them.

You could enabled 802.1x port authentication and MAC address bypass and use something like FreeRADIUS and write a small script to permit or deny access by just the MAC address.

https://documentation.meraki.com/MX/Access_Control_and_Splash_Page/MX_Access_Policies_(802.1X)#MAC_a...

https://wiki.freeradius.org/guide/Mac-Auth

[PhilipDAth]

Actually you probably don't even need a script.  You could probably get away with a regular expression.

[MarcP]

Thanks Phiip, I´ll try that