02-17-2017 08:36 AM
I have just installed a 12 AP indoor wireless solution from another manufacturer that does not perform mac address filtering and the client is insisting (post install) that the solution be able to perform this function.
I am prepared to install an alternate solution if necessary and am semi familiar with Ubiquiti. Does the current UniFi product line have this funtionality? I have searched the archives for posts related to Mac addy filtering and they are all a couple of years old so I thought it would be best to check again.
Thanks in advance for your help.
02-17-2017 09:29 AM - edited 02-17-2017 11:14 AM
There where a lot of feature requests for it and it should be coming soon in controller 5.5.x.
Although personally I don't see why people keep asking for a "security feature" that's just not secure anymore.
02-17-2017 10:31 AM
if by "perform mac address filtering" you mean create a whitelist of mac address allowed to connect, then the answer remains NO and i really believe it will always be NO. This kind of feature is clearly made for SOHO setups, and while UniFi can be used on SOHO setups, it's commonly used in larger (sometimes HUGE) setups. While there's no problem at all on using UniFi for smaller setups (sometimes 1 single UAP), some features exclusively for these small setups may lack and may never be present on UniFi.
You can, of course, block devices (mac addresses), but cannot create whitelists. For blocking a device through the WebUI, you'll need to have connected to the network at least once. Using API calls, you can block a never-connected device.
did my answer helped you ? if yes, i would love your kudos on it
02-17-2017 11:04 AM - edited 02-17-2017 11:05 AM
If you must have this, you could use WPA Enterprise authentication and then have a radius server that binds logins to mac addresses.
02-17-2017 12:19 PM
I have developed several solutions which basically offer mac-based whitelisting, and the ability to block mac addresses whenever this becomes necessary. One particular application of this is a self-service portal where end-users can manage their "budget" for a number of devices with access to the wlan.
This works nicely with the guest policies in the UniFi controller, and integrates by means of the API.
Check out my UniFi API browser tool on github: https://github.com/malle-pietje/UniFi-API-browser
The PHP API client which it uses, can be found here