LogoLogo
Release NoteMicrositeWhite PapersCloud License
Cloud User Manual
Cloud User Manual
  • What is EnGenius Cloud?
  • Getting Started
    • Signing Up
    • Logging On
    • Registering Devices to Organization
    • Assigning Devices to Network
    • Device Setup
      • QIG
      • Troubleshooting ECW AP
        • LED Status
        • Default SSIDs
        • Login to Local Access Page
      • Label information
  • Working with Organization Trees
    • Organization
    • Hierarchy View
    • Network
  • Managing Devices
    • Managing Camera
      • Recording Playback and smart Motion Search
      • Configure and Check Camera Details
        • Camera AI settings
        • Region & Cross Lines
      • Video Walls
      • AI-Powered Search
    • Managing Gateway
      • Configure and Check Gateway Details
      • VPN Status
    • Managing Access Points
      • Diag Tools
      • Configure and Check AP Details
      • AirGuard
    • Managing Switches
      • Diag Tools
      • PoE scheduling
      • Getting Switch Analytics
      • PD/Auto-Cam Lifeguard
      • VLANs
      • Mirror
      • Link Aggregation
    • Managing PDU
      • Outlet Summary
      • Outlet Scheduling
      • Outlet AutoReboot
      • Alerts
      • Diag Tool
      • LCD Panel
    • Managing Clients
      • Client Timeline
    • Device Map Location
    • Floor Plans
    • Topology
  • Configuring Networks
    • Configuring Access Points
      • Configuring SSIDs
        • 802.11 Settings
        • Configuring Security
        • SmartCasting
        • Client IP Addressing
        • Dynamic VLAN Pooling
        • Advanced Settings
        • QoS
        • Captive Portal
        • LDAP server
        • Active Directory
        • Azure AD
        • Voucher Service
        • Configuring Splash Page
        • Access control
        • Clone SSID
        • Hotspot 2.0
        • Application Control
        • Layer 3 (L3) outbound firewall
        • Examples
      • Configuring Radio
      • Configuring Cloud RADIUS
      • Configuring MyPSK
      • Configuring VLAN
    • Configuring Switch
      • System & Protocols
      • Templates
    • Configuring Gateway
      • Configuring Interface
        • WAN
        • LAN
        • Static Route
        • Policy Route
      • Configuring Site to Site VPN
      • Configuring Client VPN
        • VPN settings for IOS
        • VPN settings for Mac OS
        • VPN settings for Android
        • VPN settings for Windows 10
      • Configure ESG VPN Users
      • Configuring Firewall
    • Configuring PDU
      • Template
    • Configuring Camera
      • Quality & Retention
    • Firmware Upgrade
    • General Settings
    • Client Access Control
  • Analytics
    • Device Events
    • System Events
    • Config Logs
  • MSP Portal
    • Dashboard
    • Teams
    • Inventory & License
    • Clone Org & Networks
  • Managing Organizations
    • Managing Device Inventory and License
    • Privacy
    • Backup & Restore
      • Configuration Template
  • Managing Team Members
    • Roles and Permissions
  • Notification & Alerts
    • Notification Center
    • Configuring Alert Settings
  • Mobile App
  • Get Remote Support
  • Security
    • Two Factor Authentication
    • RadSec Certificate
  • Report
  • Appendix
    • Access Point LED Behavior
    • ESG LED Behavior
    • SSID Troubleshooting Naming Rules
    • Firewall rules
      • Global Site
      • Japan Site
  • Configuration Guide
    • SAML SSO with ADFS
Powered by GitBook
On this page
  • Blocked List
  • How to block clients
  • How to Unblock Clients
  • VIP Lists
  • How to Add VIP clients
  • How to remove VIP clients
  • Whitelist

Was this helpful?

Export as PDF
  1. Configuring Networks

Client Access Control

Last updated 6 months ago

Was this helpful?

In some cases, it is necessary to block a specific client on a network. This configuration will apply to the whole network and will affect the client immediately.

Blocked List

Navigate to Configure > Client Access Control > Rules > Block list to access this screen.

You could block clients in all SSIDs in the current network or on an SSID basis depending on your requirements. This blocked list displays which you added the blocked clients in SSID > Access Control and Manage > Clients. So you could manage whole blocked clients easily in single lists.

Good to know

AP PRO Feature Plan: 1000 entries. Basic mode:100 entries.

How to block clients

  1. Click Add in the top-right corner.

2. Enter the Mac Address, select the Scope ( All SSIDs in current Network or SSID basis), then click Apply

How to Unblock Clients

1. Select the clients on the lists

2. Click Unblock

VIP Lists

All VIP clients can bypass the Captive portal. Wired VIP clients can bypass L2 isolation.

If wireless printer/scanner/IoT to be accessible, pls make sure the wireless printer/scanner/IoT devices are under the SSID of

  • Bridge mode

  • L2 Isolation is disabled

  • Optional: If captive portal is enabled on the SSID, the “VIP” can let the IoT skip captive portal entry

If wired printer/scanner / IoT device to be accessible, then

  • Make the devices be “VIP” to all SSIDs (or to the SSIDs for the wireless clients to be able to access)

  • Any wireless client can access. No matter if NAT/Bridge mode. L2 Isolation can be enabled/ disabled

You could add the VIP clients in the current network or on SSID basis depending on your requirements. This VIP list displays which you added the VIP clients in SSID > Access Control and Manage > Clients. So you could manage whole VIP clients easily in single lists.

Good to know

AP PRO feature plan:1000 entries. basic mode:100 entries.

How to Add VIP clients

  1. Click Add in the top-right corner.

2. Enter the Mac Address, select the Scope ( Current Network or SSID basis), then click Apply

How to remove VIP clients

1. Select the clients on the lists

2. Click Delete

If L2 isolation is enabled, the VIP clients will be excluded, which means clients under the subnet can access this client even if L2 isolation is on (Only wired clients can take effect )

If NAT mode, "client isolation” will be enabled automatically

Whitelist

You could block clients in all SSIDs in the current network or on an SSID basis depending on your requirements. This Whitelist displays which you added the white clients in SSID > Access Control and Manage > Clients. So you could manage whole whitelist clients easily in single lists.

The default Client Access Control is Blocklist, so you need to change the default ACL Rule to Allow whitelist only, so your whitelist client will take effect.

Good to know

AP PRO feature plan: 1000 entries. basic mode: 100 entries.