Block mac-address in SSID

[Nedy]

Hello! I need to block one device on my Wireless Lan. I mean, I need this device not connect to my SSID. Can I do this? Can I to block the mac-address of this device? Thank you!

[BrechtSchamp · Accepted solution]

Yes, go to the clients list (Network-Wide > Clients), find the device and click on it. The scroll down and change the policy. Set the access to your ssid to blocked.

Mind you that there's a limit to the number of clients which you can block this way (3000).

If the client has not yet connected to the network you can also do it on beforehand from the clients list.

[Nedy]

Sorry! I forgot say Thank you! Just today I tried this configuration in the office and it worked perfectly. Thank you!

[BrechtSchamp]

Good to hear. Thanks for the thanks.

[Nembrey3]

Works great until they start spoofing their MAC address

[jjpathan]

I am actually looking for any possible solution to this. Currently running into this exact problem, the solution is useless once they start spoofing the mac address of the IPhone. 

[Bruce]

Yep, with the randomised MAC addresses that are used by virtually every OS now, this is hard to implement. You have to flip it on its head and ensure you are only permitting the devices you want to access your network, and block everything else.

[AnthonyP]

Apple Devices use the following:

• x2:xx:xx:xx:xx:xx
• x6:xx:xx:xx:xx:xx
• xA:xx:xx:xx:xx:xx
• xE:xx:xx:xx:xx:xx

Anyway to block these specifically?

[sametkirpat]

Can we do this by using API?