topic Re: MAC filtering on Wireless using CLI in Spark Firewall (SMB)

MAC filtering on Wireless using CLI

stef — Fri, 10 May 2024 08:58:27 GMT

We have a Quantum Spark 1535W device running version R81.10.08 (996001683)

I have enabled the mac address filtering feature for the Local Network and used the cli command "add mac-filtering-list mac <mac address>" to add multiple mac addresses in one go.

I now need to enable the mac address filtering feature on Wireless and have a large number of mac addresses to add. I cannot find any equivalent cli command for Wireless though. The only option I can see at the moment is to manually add the mac addresses, one by one, using the Web GUI.

Does anyone know of a command or any other method to bulk import mac addresses for the Wireless mac-filter feature?

Thanks,

Stephen

Re: MAC filtering on Wireless using CLI

G_W_Albrecht — Mon, 13 May 2024 14:16:18 GMT

MAC filtering is enforced on LAN ports only. The most easy way to use MAC filtering on LAN and WLAN is a bridge and DHCP:

You can add bulks of hosts using CLI: https://sc1.checkpoint.com/documents/SMB_R81.10.X/CLI/EN/Content/Topics/add-host.htm?Highlight=add%20host

Re: MAC filtering on Wireless using CLI

stef — Mon, 13 May 2024 15:03:26 GMT

Thanks for your reply.

Not sure that about MAC filtering being enforced on LAN ports only. I've already enabled it on SSIDs and it works as expected. I done this using the GUI. Wireless/SSID/Edit/Configuration/Advanced settings.

I can maybe look at the hosts options for future but I already added most Wireless users mac address manually in the GUI. I just thought it might be a more user friendly feature if there was an equivalent CLI command like the one used for LAN.

Cheers

Stephen

Re: MAC filtering on Wireless using CLI

G_W_Albrecht — Tue, 14 May 2024 07:41:34 GMT

That is true, i was talking of the Access Policy Tab:

If users are defined as hosts with their MAC included, you only have one users list to maintain instead of two MAC lists. And in logs you can track all users instead of MACs only...

Re: MAC filtering on Wireless using CLI

stef — Tue, 14 May 2024 07:57:36 GMT

Thanks G W, that makes sense