How to prevent clients from associating with 350 root bridge?

[schm196]

All our bridges and access points and clients use the same open authentication with static WEP key. Short of deploying a custom configuration for my bridge connections, is there a way to prevent clients other than bridges in client role from associating with my root bridge?

[tepatel]

You can configure MAC address filtering to allow associations from AP's and Bridges. Deny everything else which will in turn deny association from all the wireless clients.

Here is the url for that.

http://www.cisco.com/univercd/cc/td/doc/product/wireless/airo_350/350brdgs/brscg/br350c3b.htm#1036092

Follow step 1 to step 8.

[schm196]

How about AP's with lower signal strength in the same vicinity as the root bridge... if a client finds two signals (a strong one from the bridge and a weaker one from a nearby access point) and gets rejected from associating with the "good" signal due to MAC address filtering, will the client still try to associate with the weaker signal afterwards? Thanks for the link to the document; very helpful.