Is it possible to allow only authorised MAC Addresses onto a SSID

phelimmc
Here to help

Is it possible to allow only authorised MAC Addresses onto a SSID

Hi,

Can anyone please advise, I wish to allow only authorised devices (MAC Addresses) onto a particular SSID. I can see if you go to the clients list (Network-Wide > Clients), find the device and click on it you can change the policy. Set the access to your ssid to blocked and so on. 

I wish to find out is there a way around this by stopping the device joining an SSID in the first place without having to manually block them.

Thank you

3 REPLIES 3
PaulMcG
Getting noticed

Option located under Wireless/access control.  You need a RADIUS server to make it work.  But doc mentions a workaround using a splashpage.

 

https://documentation.meraki.com/MR/Encryption_and_Authentication/Enabling_MAC_based_access_control_...

 

PhilipDAth
Kind of a big deal
Kind of a big deal

You could use iPSK, where every device gets a unique key.  Only create keys for devices that you want to attach.  Anything without a key won't be able to attach.

https://documentation.meraki.com/MR/Encryption_and_Authentication/IPSK_Authentication_without_RADIUS 

PhilipDAth
Kind of a big deal
Kind of a big deal

If these are "user" devices, you could also consider using WPA2-Enterprise mode with Meraki Authentication.  With this, you create usernames/passwords for everyone who is allowed to connect.

 

https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring__WPA2-Enterprise_with_... 

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels