Since firmware release 3.7.10.0, it is now possible to apply a MAC access control list (ACL) to WAC720 and WAC730 model access points that are managed in Business Central cloud portal.
However, note that the MACL ACL feature is configured through the access point’s web management, and not through the Business Central cloud portal.
To use this feature, first upgrade your WAC720 & WAC730 access points to firmware version 3.7.10.0 or above through the cloud:
- Login to your Business Central account and navigate to the Configuration tab.
- Select a location in the Locations tree and click on the Upgrade Devices tab to list the access points in that location.
- Select 3.7.10.0 (or above) in the Upgrade firmware drop down list, choose to upgrade Now or On Date to schedule at a later date, then click Save.
- By choosing Now the firmware upgrade will proceed immediately and the AP will reboot during the upgrade. Wireless clients will lose connectivity temporarily until the reboot completes.
- By choosing On Date, you can schedule the firmware update at a later time to minimise the impact on wireless clients.
Create/Edit a MAC access control list.
1. Login to your access point’s web browser and navigate to Configuration > Security > MAC Authentication. Click the Add MAC Filter Profile button.
2. The Add MAC Filter Profile page displays, and the following settings are configurable;
- MAC Filter Profile Name: Assign a name to the profile
- Import a MAC Address List: Click the Download Sample link to see a sample text file with multiple MAC address entries.
- Select Replace to upload a new MAC Address list, replacing all existing entries in the Wireless Stations List.
- Select Merge to add MAC addresses to existing entries on the Wireless Stations List.
- MAC Address List: Manually Enter a MAC address to add it to the Wireless Stations List. To delete MAC address, select the check box to the left of the MAC address entry, and click Delete.
- Wireless Stations: Displays a list of MAC addresses already added to the list.
3. Click Apply.
Applying the MAC ACL.
4. Navigate to Configuration > Security > Profile Settings. The security profiles you see on your access point should match the security profiles assigned to the access point in Business Central.
5. Select the radio button for the security profile you wish to apply the MAC ACL to, and click Edit.
6. Select Local MAC Address Database for MAC Authentication Type.
7. Select a MAC ACL Mode option:
- Accept List. All MAC address that are in the selected profile are allowed Wi-Fi access and all MAC addresses that are not in the profile are denied Wi-Fi access.
- Deny List. All MAC address that are in the selected profile are denied Wi-Fi access and all MAC addresses that are not in the profile are allowed Wi-Fi access. (This is the default selection.)
8. MAC Filter Profile Name: Select the profile previously configured in steps 1 - 3. If you have not yet created a MAC Filter Profile, you can create one by clicking on the Add MAC Filter Profile link.
9. Click Apply.
You have now configured a MAC ACL and applied it an SSID on a cloud managed access point. Depending on your configuration, certain MAC addresses will be denied or allowed access to the Wi-Fi network. If you have configured additional Authentication on the SSID, like WPA2-PSK, the wireless client will also be required to provide the passphrase to authenticate to the Wi-Fi network.