Can I block the MAC address of client radios I don’t want to authenticate with my radius server?
use ‘/interface wireless access-list’ in case you don’t want to use radius server:
http://www.mikrotik.com/docs/ros/2.8/interface/wireless.content#4.13.6
Edgars
I most definately want to continue Radius support. It would be a nice option to be able to block MAC addresses.
you brought me in confuse - in the subject said that you want use radius to accomplish this, in the post itself that don’t.
You can do it also using radius server. Under '/int wir sec’menu enable radius-mac-authentication parameter and under ‘/radius’ menu add a radius server specifying that it will be used as wireless access table (service=wireless). See the AAA documentation for more information.
Edgars
Ok, let me try and clear it up
I already have my Mikrotiks authenticating wireless clients with my radius server. This works. What I find is that the Mikrotik box will see other radios, not my clients, and send auth packets for those radios to my radius server. I would like the ability to block those non-clients MACs at the Mikrotik.
http://www.mikrotik.com/docs/ros/2.8/interface/wireless.content#4.13.6
Add MAC addresses of those non-clients radios to the access list adding authentication=no for each of them.
Eugene
Perfect. Thanks!