Configure MAC Access Control

You can configure the MAC access control lists to allow or deny wireless client connections based on the MAC addresses of the client devices. You can configure a list of denied and allowed MAC addresses in the Gateway Wireless Controller. Then, you can configure each SSID to use one of these lists to control wireless client access to your network.

The maximum number of denied and allowed MAC addresses is 256. We recommend that you limit the total number of denied and allowed MAC addresses to 50 addresses to avoid performance issues.

There are two types of MAC access control lists:

Denied MAC Addresses

To make sure certain wireless clients cannot connect to your AP device, you can add the MAC addresses of those wireless clients to the Denied MAC Addresses list. If you configure an SSID to use the Denied MAC Addresses list, any wireless clients with MAC addresses that are on this list are not allowed to connect to that SSID.

Allowed MAC Addresses

To enable certain wireless clients to connect to your AP device, you can add the MAC addresses those wireless clients to the Allowed MAC Addresses list. If you configure an SSID to use the Allowed MAC Addresses list, only wireless clients with MAC addresses that are on this list can connect to that SSID.

Edit the MAC Access Control Lists

Enable an SSID to Use MAC Access Control

To configure an SSID to deny access based on the MAC Access Control settings, you must enable MAC Access Control in the SSID settings.

From the Gateway Wireless Controller:

  1. On the SSIDs tab, select an SSID.
  2. Click Edit.
  3. Select the Use the MAC Access Control list defined in the Gateway Wireless Controller Settings check box.
  4. From the drop-down list, select a list: Denied MAC Addresses or Allowed MAC Addresses.
  5. Save the configuration file to the Firebox.

After you enable MAC Access Control for an SSID, the AP device uses the selected MAC Access Control list to determine whether to allow wireless clients to connect to that SSID.

See Also

Configure WatchGuard AP Device SSIDs

Configure Gateway Wireless Controller Settings

Give Us Feedback     Get Support     All Product Documentation     Technical Search