Blocking devices that use Randomized MAC Addresses to connect to SSID

Linda

I will block devices that are connected to an SSID that they are not supposed to, but because they have randomization turned on, they can get a fresh MAC address and reconnect. Devices are BYOD so I can't force people to turn it off in their settings.

PeterUK

Their is nothing you can do about the device that Randomized MAC it can not be known that it is random MAC only that its a new MAC.

One way to deal with this is a MAC filter of allowed MAC's but if thats not a option nothing anyone can do about it.

Linda

I believe randomized MAC addresses have 2, 6, A or E as their second digit. So it'd be nice if there is a setting to deny connection from devices with MAC addresses starting with *2, *6, *A, or *E.

Zyxel_Melen

Hi @Linda,

We will evaluate this idea. However, it is recommended to use:

1. 802.1x for authentication. (If your model supports 802.1x)
2. MAC authentication to allow know MAC address. (Require to learn the MAC addresses of accepted devices.)