Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Configure Media Access Control (MAC) Address Filtering on a Wireless Access Point (WAP)


Media Access Control (MAC) Address filtering lets you list down the MAC addresses of the wireless clients connected to your network, effectively creating a known-only devices list. You can then grant or deny the devices access to the network, depending on your requirement.

MAC address filtering can be enabled or disabled per Virtual Access Point (VAP) on a wireless router and a wireless access point (WAP). In addition, a VAP can be configured to look at a MAC filter list on an external Remote Authentication Dial-In User Service (RADIUS) server.

This article aims to show you how to configure MAC address filtering on a WAP.

Applicable Devices

  • WAP131
  • WAP351
  • WAP371

Software Version

  • — WAP131, WAP351
  • — WAP371

Configure MAC Address Filtering

Add a MAC Address to the List

Step 1. Log in to the web-based utility of the access point and choose Wireless > MAC Filtering.

Step 2. Choose the appropriate filter to be deployed in the Filter area. The options are:

  • Allow only stations in list — This option only lets devices with its MAC address included in the filter list to connect to the network.
  • Block all stations in list — This option denies connection requests from devices whose MAC addresses are not on the filter list.

Note: In this example, Block all stations in list is chosen.

Step 3. In the MAC Address fields, enter the MAC Address you want to add to the list.

Step 4. Click the Add button.

Step 5. Click Save.

You should now have successfully added a MAC Address to the MAC Filter list.

Delete a MAC Address from the List

Step 1. In the Stations List area, choose the MAC address that needs to be removed.

Note: In this example, cc:cc:cc:cc:cc:cc is chosen.

Step 2. Click the Remove button.

Step 3. Click Save.

You should now have successfully removed a MAC address from the MAC Filter list.

Apply the MAC Filter List to a VAP

Step 1. Choose Wireless > Networks.

Step 2. Choose the SSID where the filter list needs to be applied to.

Note: In this example, the filter will be applied to the WAP371_5ghz network.

Step 3. Click Edit.

Step 4. Choose the source of the filter from the MAC Filter drop-down list. The options are:

  • Disabled — This option deactivates MAC Filtering on the chosen VAP.
  • Local — This option uses the list created in the Access point.
  • RADIUS — This option makes use of a RADIUS server for the MAC filter.

Note: In this example, Local is chosen.

Step 5. Click Save.

You should now have applied MAC filtering to the chosen VAP.

Version history
Revision #:
1 of 1
Last update:
‎03-20-2017 02:02 AM