×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Configure Media Access Control (MAC) Address Filtering on a Wireless Access Point (WAP)

Document

Tue, 03/21/2017 - 11:00
Apr 26th, 2016
User Badges:

Cisco Support Community

Article ID: 5081

Objective

Media Access Control (MAC) Address filtering lets you list down the MAC addresses of the wireless clients connected to your network, effectively creating a known-only devices list. You can then grant or deny the devices access to the network, depending on your requirement.

MAC address filtering can be enabled or disabled per Virtual Access Point (VAP) on a wireless router and a wireless access point (WAP). In addition, a VAP can be configured to look at a MAC filter list on an external Remote Authentication Dial-In User Service (RADIUS) server.

This article aims to show you how to configure MAC address filtering on a WAP.

Applicable Devices

  • WAP131
  • WAP351
  • WAP371

Software Version

  • 1.0.2.8 — WAP131, WAP351
  • 1.2.1.3 — WAP371

Configure MAC Address Filtering

Add a MAC Address to the List

Step 1. Log in to the web-based utility of the access point and choose Wireless > MAC Filtering.

Step 2. Choose the appropriate filter to be deployed in the Filter area. The options are:

  • Allow only stations in list — This option only lets devices with its MAC address included in the filter list to connect to the network.
  • Block all stations in list — This option denies connection requests from devices whose MAC addresses are not on the filter list.

Note: In this example, Block all stations in list is chosen.

Step 3. In the MAC Address fields, enter the MAC Address you want to add to the list.

Step 4. Click the Add button.

Step 5. Click Save.

You should now have successfully added a MAC Address to the MAC Filter list.

Delete a MAC Address from the List

Step 1. In the Stations List area, choose the MAC address that needs to be removed.

Note: In this example, cc:cc:cc:cc:cc:cc is chosen.

Step 2. Click the Remove button.

Step 3. Click Save.

You should now have successfully removed a MAC address from the MAC Filter list.

Apply the MAC Filter List to a VAP

Step 1. Choose Wireless > Networks.

Step 2. Choose the SSID where the filter list needs to be applied to.

Note: In this example, the filter will be applied to the WAP371_5ghz network.

Step 3. Click Edit.

Step 4. Choose the source of the filter from the MAC Filter drop-down list. The options are:

  • Disabled — This option deactivates MAC Filtering on the chosen VAP.
  • Local — This option uses the list created in the Access point.
  • RADIUS — This option makes use of a RADIUS server for the MAC filter.

Note: In this example, Local is chosen.

Step 5. Click Save.

You should now have applied MAC filtering to the chosen VAP.

Loading.

Actions

This Document