Block wireless MAC when using Radius Auth

Can I block the MAC address of client radios I don’t want to authenticate with my radius server?

use ‘/interface wireless access-list’ in case you don’t want to use radius server:
http://www.mikrotik.com/docs/ros/2.8/interface/wireless.content#4.13.6

Edgars

I most definately want to continue Radius support. It would be a nice option to be able to block MAC addresses.

you brought me in confuse - in the subject said that you want use radius to accomplish this, in the post itself that don’t.

You can do it also using radius server. Under '/int wir sec’menu enable radius-mac-authentication parameter and under ‘/radius’ menu add a radius server specifying that it will be used as wireless access table (service=wireless). See the AAA documentation for more information.

Edgars

Ok, let me try and clear it up :slight_smile: I already have my Mikrotiks authenticating wireless clients with my radius server. This works. What I find is that the Mikrotik box will see other radios, not my clients, and send auth packets for those radios to my radius server. I would like the ability to block those non-clients MACs at the Mikrotik.

http://www.mikrotik.com/docs/ros/2.8/interface/wireless.content#4.13.6

Add MAC addresses of those non-clients radios to the access list adding authentication=no for each of them.

Eugene

Perfect. Thanks!