How to block someone from WiFi

Product Discussion Pepwave AP & Surf
,
1

How can I block a specific users either by MAC or IP address from the WiFi network?
I have one person who keeps using the guest network while he/she should be on our own network. How can I block this person from using the Guest WiFi and use the network assigned them them?

1 Like
2

AP > Wireless SSID > SSID name (guest)

Access Control > Restricted Mode > Accept all except listed. Enter the MAC addresses you wish to block from this specific SSID.

2 Likes
3

Hello @ScooterIT,
We see this issue in a lot of places, we find most of the time it is due to the devices automaticcly connecting to the guest network. In most devices you can forget or remove the required SSID from the devices approved list. What is the device type (mobile or PC, operating system)?
Of cause if they are intentional connecting, that is when you would use the MAC Address method from @Don_Ferrario.
Happy to Help,
Marcus :slight_smile:

4

Hi Marcus,

Thanks for your reply.
No in this case its an employee who keeps using the Guest network despite me removing the password from the device. For some reason this person keeps entering the guest network password despite being connected to the official one. Just want to make it impossible for this MAC address to connect to the Guest network.

Rogier

5

Hello @ScooterIT,
The MAC is the best option for you in this case, though you will need to combine it with a DHCP assignment. Blocking just the MAC will block them from all access.

Here is our suggestion

  1. Create a DHCP reservation with an invalid IP on the VLAN of the Guest Wi-Fi
    DHCP%20Reservation%20with%20Fake%20numbers%20(Rising%20Connection)
    DHCP%20Reservation%20with%20Fake%20numbers%20(Rising%20Connection)801×88 14.2 KB
  2. Create a Firewall rule to block all traffic with the fake IP of “0.0.0.0”
    New%20Firewall%20Rule%20with%20Fake%20IP%20number%20(Rising%20Connection)
    New%20Firewall%20Rule%20with%20Fake%20IP%20number%20(Rising%20Connection)788×233 30.1 KB

The location of the menus differs a little bit between the Balance Routers & the Pepwave MAX routers.
Happy to Help,
Marcus :slight_smile:

3 Likes
6

Even when I just block the MAC address from the SSID used for the Guest network?
The main connection runs trough ethernet to the same Peplink router.

1 Like
7

Block MAC address to the SSIDs have nothing related to the Ethernet connection. The Ethernet connection for the device still able to connect to the network.

2 Likes
8

Hello @ScooterIT,
Here is another idea you can attempt if you want to keep devices off the network.

The first and most central way for this is from InControl2; you can block the MAC at the SSID level within the Wi-Fi settings.

InControl2%20-%20Wi-Fi%20-%20SSID%20Settings%20-%20MAC%20Filter%20(Rising%20Connection)

We realise not everyone uses InControl2, so you can also look at these two options:

  • If you are using the Peplink/Pepwave routers then use the options builtin to the routers internal AP Controler feature set.
  • If you are running the WAPs in standalone (no AP controller), then you can look at using the menus within the WAP to block the MAC, you will need to add this to each WAP individually.

Happy to Help,
Marcus :slight_smile:

9

Thats a blast from the past :slight_smile:

Thanks, I will look into it.

Smiles across the wires,

Rogier

1 Like