MSM7xx Controllers Configuration Guide v6.4.0

Configuring global MAC lockout
This feature lets you block traffic from client stations based on their MAC address. MAC lockout
applies to globally to all client stations connected to:
• Wireless ports on controlled APs
• Wired ports (including switch ports) on controlled APs
• Local mesh ports on controlled APs
• The LAN port (Access network on the MSM720) on the controller
NOTE: MAC lockout does not apply to the Internet port (Internet network on the MSM720).
To configure MAC lockout, select Controller >> Security > MAC lockout.
Select the MAC address list that will be used to lockout client stations. If a client station's MAC
address appears in the list it will be blocked from using the network. Up to 64 MAC addresses
can be defined in a list for use with MAC lockout. Define lists by selecting Controller >> Security
> MAC lists.
Configuring MAC-based filters on a VSC
The Wireless MAC filter option enables you to control access to the wireless network based on the
MAC address of a wireless device. You can either block access or allow access, depending on
your requirements.
This feature is configured on the VSC profile page. (To open this page, see “Viewing and editing
VSC profiles” (page 112)).
MAC address list
Select the MAC address list to check when the Wireless MAC filter option is enabled. It the
MAC address of a client station appears in the list, then the selected Filter action is applied.
Define lists by selecting Security > MAC lists.
344 User authentication, accounts, and addressing