topic Re: Can I create a larger than 128 count Layer 2 Mac ACL list with a Zone director? in Unleashed

Can I create a larger than 128 count Layer 2 Mac ACL list with a Zone director?

bdillard — Tue, 07 Aug 2018 17:19:59 GMT

Hello,

Currently we are just using Ruckus Unleashed with a bunch of 510 APs with whatever AP comes on line first as the controller. With the current Ruckus software/firmware we have a maximum approved list of 128 devices for an SSID. I can create more SSIDs and then use a different ACL list but ideally it would be just the one SSID for that Vlan with just one acl layer 2 group. I'm having trouble finding any useful information about the zone director on the zone director web page. Is it possible with a ZD1200 to have an acl list of more than 128 mac addresses?

We use WPA2 but want ACL as well.

Thanks

Re: Can I create a larger than 128 count Layer 2 Mac ACL list with a Zone director?

albert_pierson — Tue, 07 Aug 2018 19:54:14 GMT

Hi,

The Zone Director and the Smart Zone controllers have the same 128 maximum MAC for L2 ACL's.

This is implemented in the AP radio and is a limitation of the radio chipset.

An alternative is to do MAC authentication, but this requires and external RADIUS server.

Thanks

Re: Can I create a larger than 128 count Layer 2 Mac ACL list with a Zone director?

nadun — Wed, 29 Jan 2020 17:09:51 GMT

Hi Albert Pierson,

Can you share documents or articles about MAC authentication and RADIUS server configuration?

Thanks.

Re: Can I create a larger than 128 count Layer 2 Mac ACL list with a Zone director?

albert_pierson — Wed, 29 Jan 2020 17:18:23 GMT

Hi Nadun,

Here are some Knowledge base articles available on the support portal:

mac authentication using radius server 

How to configure MAC authentication with RADIUS
https://support.ruckuswireless.com/articles/000001847

MAC address filtering compared to MAC authentication 
Difference between MAC address filtering and MAC address authentication
https://support.ruckuswireless.com/articles/000001247

Is it possible to configure Mac authentication without a AAA server 

Would it be possible to configure a Mac authentication for an SSID without using any valid AAA server?
https://support.ruckuswireless.com/articles/000002833

I hope you find these articles helpful.

thanks
Albert