Block mac-address in SSID

SOLVED
Nedy
Getting noticed

Block mac-address in SSID

Hello! I need to block one device on my Wireless Lan. I mean, I need this device not connect to my SSID. Can I do this? Can I to block the mac-address of this device? Thank you!

1 ACCEPTED SOLUTION
BrechtSchamp
Kind of a big deal

Yes, go to the clients list (Network-Wide > Clients), find the device and click on it. The scroll down and change the policy. Set the access to your ssid to blocked.

 

Mind you that there's a limit to the number of clients which you can block this way (3000).

 

2019-03-02 18_49_20-Greenshot.png

 

If the client has not yet connected to the network you can also do it on beforehand from the clients list.

2019-03-02 18_52_04-Greenshot.png

View solution in original post

8 REPLIES 8
BrechtSchamp
Kind of a big deal

Yes, go to the clients list (Network-Wide > Clients), find the device and click on it. The scroll down and change the policy. Set the access to your ssid to blocked.

 

Mind you that there's a limit to the number of clients which you can block this way (3000).

 

2019-03-02 18_49_20-Greenshot.png

 

If the client has not yet connected to the network you can also do it on beforehand from the clients list.

2019-03-02 18_52_04-Greenshot.png

Sorry! I forgot say Thank you! Just today I tried this configuration in the office and it worked perfectly. Thank you!
BrechtSchamp
Kind of a big deal

Good to hear. Thanks for the thanks.

Works great until they start spoofing their MAC address

I am actually looking for any possible solution to this. Currently running into this exact problem, the solution is useless once they start spoofing the mac address of the IPhone. 

Bruce
Kind of a big deal

Yep, with the randomised MAC addresses that are used by virtually every OS now, this is hard to implement. You have to flip it on its head and ensure you are only permitting the devices you want to access your network, and block everything else.

Apple Devices use the following:

  • x2:xx:xx:xx:xx:xx
  • x6:xx:xx:xx:xx:xx
  • xA:xx:xx:xx:xx:xx
  • xE:xx:xx:xx:xx:xx

Anyway to block these specifically?

Can we do this by using API?

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels