Using MAC Address filtering on switch with Access Points connected

mkeats

Hi, hoping someone might have some advice.

I am trying to setup MAC Address filtering on a switch to limit which devices can connect.

There are two VLANs, internal network and then guest WiFi.

3 access points in use.

Would like several mobile devices to only access WiFi and several servers or workstations to allow access on internal network.

Thanks

Mike

Zyxel_Judy

Hi @mkeats ,

Based on your description, it seems you want clients to have Internet access only, without the ability to connect to the LAN or other wireless clients.

You can achieve this by configuring a Guest network in the SSID settings. Please refer to this article for detailed information and configuration steps.

https://community.zyxel.com/en/discussion/10344/nebula-how-to-setup-a-guest-network-wi-fi

mkeats

Hi, thanks for the reply.

What I was thinking was not only wireless clients but also wired? So if someone rocked up with a personal laptop for instance and plugged in to a port on the switch they wouldn't get access to the internal network?

Zyxel_Judy

Hi @mkeats ,

Sorry for late response.

Please refer to this article for instructions on how to configure MAC authentication on a Nebula switch. This will allow you to block both wireless and wired clients that are not included in the MAC authentication list.

https://community.zyxel.com/en/discussion/16981/how-to-configure-mac-authentication-via-nebula-cloud-authentication-server-ncas-on-nebula-switch