Client Access Control
Last updated
Last updated
In some cases, it is necessary to block a specific client on a network. This configuration will apply to the whole network and will affect the client immediately.
Navigate to Configure > Client Access Control > Rules > Block list to access this screen.
You could block clients in all SSIDs in the current network or on an SSID basis depending on your requirements. This blocked list displays which you added the blocked clients in SSID > Access Control and Manage > Clients. So you could manage whole blocked clients easily in single lists.
Good to know
AP PRO Feature Plan: 1000 entries. Basic mode:100 entries.
Click Add in the top-right corner.
2. Enter the Mac Address, select the Scope ( All SSIDs in current Network or SSID basis), then click Apply
1. Select the clients on the lists
2. Click Unblock
All VIP clients can bypass the Captive portal. Wired VIP clients can bypass L2 isolation.
If wireless printer/scanner/IoT to be accessible, pls make sure the wireless printer/scanner/IoT devices are under the SSID of
Bridge mode
L2 Isolation is disabled
Optional: If captive portal is enabled on the SSID, the “VIP” can let the IoT skip captive portal entry
If wired printer/scanner / IoT device to be accessible, then
Make the devices be “VIP” to all SSIDs (or to the SSIDs for the wireless clients to be able to access)
Any wireless client can access. No matter if NAT/Bridge mode. L2 Isolation can be enabled/ disabled
You could add the VIP clients in the current network or on SSID basis depending on your requirements. This VIP list displays which you added the VIP clients in SSID > Access Control and Manage > Clients. So you could manage whole VIP clients easily in single lists.
Good to know
AP PRO feature plan:1000 entries. basic mode:100 entries.
Click Add in the top-right corner.
2. Enter the Mac Address, select the Scope ( Current Network or SSID basis), then click Apply
1. Select the clients on the lists
2. Click Delete
If L2 isolation is enabled, the VIP clients will be excluded, which means clients under the subnet can access this client even if L2 isolation is on (Only wired clients can take effect )
If NAT mode, "client isolation” will be enabled automatically
You could block clients in all SSIDs in the current network or on an SSID basis depending on your requirements. This Whitelist displays which you added the white clients in SSID > Access Control and Manage > Clients. So you could manage whole whitelist clients easily in single lists.
The default Client Access Control is Blocklist, so you need to change the default ACL Rule to Allow whitelist only, so your whitelist client will take effect.
Good to know
AP PRO feature plan: 1000 entries. basic mode: 100 entries.
