MAC address filtering

How can I block a certain MAC address from connecting to my AP? The MAC connects and disconnects several times a day on several AP’s. As far as I can tell this MAC does not belong to our network.

Check your wireless interface for “default-authentication=no”

if YES enybody can connect to your network!

In “/interface wireless access-list” you can add MAC addresses of divices who you wont to connect to your network!


/interface wireless access-list add mac-address=xx:xx:xx:xx:xx:xx interface="ap interface" comment="Known User"

This was great success.

Please correct me if I’m wrong, if there is a check mark in default-authentication then it is turned on, and anyone can connect but if I remove the check mark from default-authentication then only the Mac’s in my wireless access-list can connect?

That is definitly correct, just make sure you copy your regiseterd users from registration then uncheck default authenticate. Make sure everyone reconnects. I did have one rb532 that this function will not work on, had to change out board.

Thank you so much for replying, and for the extra info, it will help if I run into that situation. I will know that it can happen, and I wont be pulling out my hair trying to figure out why someone isnt reassociating to AP.

No problemo