Reply
Highlighted
New Member
Posts: 6
Registered: ‎09-08-2016
Kudos: 1

Mac address filtering 2017

I have just installed a 12 AP indoor wireless solution from another manufacturer that does not perform mac address filtering and the client is insisting (post install) that the solution be able to perform this function.

 

I am prepared to install an alternate solution if necessary and am semi familiar with Ubiquiti. Does the current UniFi product line have this funtionality? I have searched the archives for posts related to Mac addy filtering and they are all a couple of years old so I thought it would be best to check again.

 

Thanks in advance for your help.

 

Marcus

Senior Member
Posts: 3,774
Registered: ‎01-04-2017
Kudos: 478
Solutions: 177

Re: Mac address filtering 2017

Not that I am aware of.
"What we've got here is failure to communicate"
Feature Request: RFC 6296 (IPv6 to IPv6 Npt)
Unbound for DNS
Senior Member
Posts: 3,774
Registered: ‎01-04-2017
Kudos: 478
Solutions: 177

Re: Mac address filtering 2017

But you do have the functionality to block devices
"What we've got here is failure to communicate"
Feature Request: RFC 6296 (IPv6 to IPv6 Npt)
Unbound for DNS
Senior Member
Posts: 3,774
Registered: ‎01-04-2017
Kudos: 478
Solutions: 177

Re: Mac address filtering 2017

(Which probably uses mac address) but you can not make a list of allowed mac address's for connecting.
"What we've got here is failure to communicate"
Feature Request: RFC 6296 (IPv6 to IPv6 Npt)
Unbound for DNS
Established Member
Posts: 1,955
Registered: ‎04-26-2016
Kudos: 650
Solutions: 193

Re: Mac address filtering 2017

[ Edited ]

There where a lot of feature requests for it and it should be coming soon in controller 5.5.x.

 

Although personally I don't see why people keep asking for a "security feature" that's just not secure anymore.

 

See this thread: https://community.ubnt.com/t5/UniFi-Feature-Requests/Per-SSID-MAC-Filtering/idc-p/1838416#M8888

Established Member
Posts: 1,070
Registered: ‎07-17-2013
Kudos: 731
Solutions: 75
Contributions: 1

Re: Mac address filtering 2017

if by "perform mac address filtering" you mean create a whitelist of mac address allowed to connect, then the answer remains NO and i really believe it will always be NO. This kind of feature is clearly made for SOHO setups, and while UniFi can be used on SOHO setups, it's commonly used in larger (sometimes HUGE) setups. While there's no problem at all on using UniFi for smaller setups (sometimes 1 single UAP), some features exclusively for these small setups may lack and may never be present on UniFi.

 

You can, of course, block devices (mac addresses), but cannot create whitelists. For blocking a device through the WebUI, you'll need to have connected to the network at least once. Using API calls, you can block a never-connected device.

 

 

Solutti Tecnologia Ltda - Goiânia/Goiás/Brazil
www.solutti.com.br

did my answer helped you ? if yes, i would love your kudos on it Man Happy
Emerging Member
Posts: 64
Registered: ‎04-27-2015
Kudos: 10
Solutions: 1

Re: Mac address filtering 2017

[ Edited ]

If you must have this, you could use WPA Enterprise authentication and then have a radius server that binds logins to mac addresses.

Senior Member
Posts: 3,385
Registered: ‎06-13-2015
Kudos: 898
Solutions: 169

Re: Mac address filtering 2017

I have developed several solutions which basically offer mac-based whitelisting, and the ability to block mac addresses whenever this becomes necessary. One particular application of this is a self-service portal where end-users can manage their "budget" for a number of devices with access to the wlan.

 

This works nicely with the guest policies in the UniFi controller, and integrates by means of the API.

Art of WiFi
Check out our UniFi API browser tool on GitHub. The PHP API client which it uses, can be found here on GitHub.
Details on our UniFi Device Search tool can be found here.
Emerging Member
Posts: 53
Registered: ‎01-14-2014
Kudos: 5
Solutions: 2

Re: Mac address filtering 2017

You could do something else that would accomplish this if you are using a different VLAN for Wireless Devices and use a Windows or Linux DHCP server.
Reply