Access Control
Last updated
Last updated
In some cases, it is necessary to block a specific client on a network. This configuration will apply to the whole network and will affect the client immediately.
Navigate to Configure > Access Control to access this screen.
You could block clients in the current network or on SSID basis depending on your requirement. This blocked list displays which you added the blocked clients in SSID > Access Control and Manage > Clients . So you could manage whole blocked clients easily in single lists. Noted that there is a limit of 1000 clients for blocking.
Click Add in the top-right corner .
2. Enter the Mac Address , select the Scope ( Current Network or SSID basis) , then click Apply
1. Select the clients on the lists
2. Click Unblock
All VIP clients can bypass Captive portal. Wired VIP client can bypass L2 isolation .
If wireless printer/scanner/IoT to be accessible, pls make sure the wireless printer/scanner/IoT devices are under SSID of
Bridge mode
L2 Isolation is disabled
Optional: If captive portal is enabled on the SSID, the “VIP” can let the IoT skip captive portal entry
If wired printer / scanner / IoT device to be accessible, then
Make the devices be “VIP” to all SSID’s (or to the SSID’s for the wireless clients to be able to access)
Any wireless client can access. No matter if NAT/Bridge mode. L2 Isolation can be enabled / disabled
You could add the VIP clients in the current network or on SSID basis depending on your requirement. This VIP list displays which you added the VIP clients in SSID > Access Control and Manage > Clients . So you could manage whole VIP clients easily in single lists. Noted that there is a limit of 50 clients for VIP.
Click Add in the top-right corner .
2. Enter the Mac Address , select the Scope ( Current Network or SSID basis) , then click Apply
1. Select the clients on the lists
2. Click Delete
If L2 isolation is enabled, the whitelist clients will be excluded, which means clients under the subnet can access this client even L2 isolation is on (Only wired client can take effect )
If NAT mode, no whitelist client will be allowed. That means Under NAT mode, “client isolation” will be enabled automatically
