topic How to enable only registered Mac adresse in ZoneDirector

How to enable only registered Mac adresse

christian_hartm — Sun, 03 Nov 2013 08:05:32 GMT

Hi, there.
I need to block unregistered MAC Adress Users.
What i did is Creating a MAC/L2 User List.
What i cant find is how to make it work?
Do i have to enable this function ? If YES where ?
Many thanks i advance and Happy Divali

Re: How to enable only registered Mac adresse

primoz_marinsek — Mon, 04 Nov 2013 07:30:06 GMT

Well if you have a ZD you create a CLI L2 profile and apply it to a praticular WLAN under the advanced options.

Re: How to enable only registered Mac adresse

christian_hartm — Mon, 04 Nov 2013 07:47:22 GMT

Thanks a lot, works now. To recognize each User by his MAC Adress is a bit more difficult i think. Do have a hint for that either ?

Re: How to enable only registered Mac adresse

primoz_marinsek — Mon, 04 Nov 2013 08:14:18 GMT

If you use DPSK you will see username of the user on the network. Highly recommended as MAC filtering really isn't a security feature.

DPSKs are easy and highly secure.

Re: How to enable only registered Mac adresse

max_o_driscoll — Mon, 04 Nov 2013 09:37:44 GMT

Also there is a limit to MAC addresses on each ACL - somewhere around the 120 region (yes it's probably 128 but recall my laptops falling off network at about 120).

- you can only apply one ACL to each WLAN...

- so lots of devices means several WLANs. Just worth thinking about if you intend to "grow".

Whether MAC address authorisation is secure enough depends on your environment. Here in school I'm okay with it.

If you have a guest lan enabled then new devices eventually end up on that (as unauthorised clients) which lets me see their MAC and I can add to the correct ACL as necessary.

Works for me.