The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Media Access Control (MAC) Address filtering lets you list down the MAC addresses of the wireless clients connected to your network, effectively creating a known-only devices list. You can then grant or deny permission for these devices on the list to connect to the network and its resources, depending on your requirement.
MAC address filtering can be enabled or disabled per Virtual Access Point (VAP) on a wireless router and a wireless access point (WAP). In addition, a VAP can be configured to look at a MAC filter list on an external Remote Authentication Dial-In User Service (RADIUS) server.
In this scenario, a list of MAC addresses will be denied permission to connect to the network and its resources. This means that even if these devices have the correct password, they still cannot establish a connection to the WAP and its wireless network.
This article aims to show you how to configure MAC address filtering on a WAP.
Step 1. Log in to the web-based utility of the access point and choose Wireless > MAC Filtering.
Step 2. Choose the appropriate filter to be deployed in the Filter area. The options are:
Note: In this example, Block all stations in list is chosen.
Step 3. In the MAC Address fields, enter the MAC Address you want to add to the list.
Note: In this example, a device that has the MAC address 28:f0:76:2a:21:92 is added to the list.
Step 4. Click the Add button.
Step 5. Verify that the MAC address you added appears inside the Stations List box and then, click Save.
You now have successfully added a MAC Address to the MAC Filter list.
Step 1. Choose Wireless > Networks.
Step 2. Choose the Radio for the VAP where the filter list needs to be applied to.
Note: In this example, Radio 1 (5 GHz) is chosen.
Step 3. Choose the SSID where the filter list needs to be applied to.
Note: In this example, the filter will be applied to the ForMAC network.
Step 4. Click the Edit button.
Step 5. Choose the source of the filter from the MAC Filter drop-down list. The options are:
Note: In this example, Local is chosen.
Step 6. Click Save.
You should now have applied MAC filtering to the chosen VAP. The device whose MAC address is listed will not be able to establish a connection to the network even if the correct password is entered.
Step 1. In the Stations List area, choose the MAC address that needs to be removed.
Note: In this example, 28:f0:76:2a:21:92 is chosen.
Step 2. Click the Remove button.
Step 3. Click.
You now have successfully removed a MAC address from the MAC Filter list.