How to block wireless client by MAC address on SonicWall TZ devices

10/14/2021 26 20063

DESCRIPTION:

This article shows you how to block wireless client by MAC address when using SonicWall firewall. And also shows you how to unblock the client.

RESOLUTION:

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

In this case, a laptop is connect to the SonicWall through WLAN.

Block the wireless client by MAC address

To block the wireless client by MAC address, you should follow below steps.

Step 1: Navigate to  Monitor | Wireless Status page. 

Step 2: Click the block button of the relevant client you are interesting in (You should know the MAC address of the client) at Station Status area. 

Note: After click the block button, from the wireless client you can still see the AP, but when you try to connect, an error will pop-up.

Unblock the wireless client

Once the client is blocked, you may need to unblock the client.  By default, the blocked client will be recorded in "Default ACL Deny Group".

Note: Go to  Manage | Wireless | MAC Filter List, you can create a custom Deny List.

To unblock the client, please follow below steps.

Step 1: Go to Manage| Objects | Address Objects page. Look for Default ACL Deny Group at Address Groups area.

Step 2: Click the edit button of  Default ACL Deny Group and remove the relevant MAC address object of the wireless client.

Step 3: At Address Objects area of the same page, delete the relevant MAC address object of the wireless client. (Optional)

After complete above steps, your client can re-connect to the AP.

Resolution for SonicOS 6.2 and Below

The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.

In this case, a laptop is connect to the SonicWall through WLAN.

Block the wireless client by MAC address

To block the wireless client by MAC address, you should follow below steps.

Step 1: Navigate to Wireless | Status page. 

Step 2: Click the block button of the relevant client you are interesting in (You should know the MAC address of the client) at Station Status area. 

Note: After click the block button, from the wireless client you can still see the AP, but when you try to connect, an error will pop-up.

Unblock the wireless client

Once the client is blocked, you may need to unblock the client.  By default, the blocked client will be recorded in "Default ACL Deny Group".

Note: Go to Wireless | MAC Filter List, you can create a custom Deny List.

To unblock the client, please follow below steps.

Step 1: Go to Firewall | Address Objects page. Look for Default ACL Deny Group at Address Groups area.

Step 2: Click the edit button of  Default ACL Deny Group and remove the relevant MAC address object of the wireless client.

Step 3: At Address Objects area of the same page, delete the relevant MAC address object of the wireless client. (Optional)

After complete above steps, your client can re-connect to the AP.