Community discussions

MikroTik App
 
vlarsen
just joined
Topic Author
Posts: 7
Joined: Thu Jul 11, 2019 11:13 pm

CAPsMAN Access list

Thu Oct 15, 2020 5:54 pm

How do you allow certain MAC addresses to access only the main wireless network, but allow all to my Guest Network?
Doesn't seem like you can group interfaces together in a group. I've got 14 AP's with a main network and Guest Network. On the main network I only want to allow certain MAC's and disallow the rest without affecting the Guest Network. Hope this makes sense.
 
gotsprings
Forum Veteran
Forum Veteran
Posts: 987
Joined: Mon May 14, 2012 9:30 pm

Re: CAPsMAN Access list

Thu Oct 15, 2020 9:07 pm

Have them join. Hit the copy to access list. Adjust the rules to allow them into your preferred network. Ban everything else.
"It ain't what you don't know that gets you into trouble. It's what you know for sure that just ain't so."
Mark Twain
 
vlarsen
just joined
Topic Author
Posts: 7
Joined: Thu Jul 11, 2019 11:13 pm

Re: CAPsMAN Access list

Thu Oct 15, 2020 11:35 pm

Banning everything else, is the bigger problem. Now unless a mac is allowed it,will drop. Does that sound like a good Guest network setup?
Mikrotik needs a way to group interfaces (ie. guest channels) so i can apply different rules to them.
 
gotsprings
Forum Veteran
Forum Veteran
Posts: 987
Joined: Mon May 14, 2012 9:30 pm

Re: CAPsMAN Access list

Fri Oct 16, 2020 1:46 am

They do... Lists.
"It ain't what you don't know that gets you into trouble. It's what you know for sure that just ain't so."
Mark Twain
 
biomesh
Member Candidate
Member Candidate
Posts: 217
Joined: Fri Feb 10, 2012 8:25 pm

Re: CAPsMAN Access list

Fri Oct 16, 2020 6:16 am

There is a ssid regex option that you can use to apply certain rules in the access list to certain networks. You don't have to specify a Mac address either.

You could have an accept rule for all devices in your guest ssid and limit your main network with accept rules for that ssid with only defined Mac addresses - then a reject rule to block everything else on the main ssid.
 
vlarsen
just joined
Topic Author
Posts: 7
Joined: Thu Jul 11, 2019 11:13 pm

Re: CAPsMAN Access list

Wed Oct 21, 2020 12:03 am

@biomesh
That's exactly what I was looking for. The "list" is really the SSID and that will work perfectly. Thank you.

Who is online

Users browsing this forum: No registered users and 29 guests