As shown in Figure 1, visiting employees often bring their laptops in an AP's coverage area on a campus network. If only STAs of a few local employees are allowed to connect to the wireless network, the enterprise can configure the whitelist function on the AC and add MAC addresses of these STAs to the whitelist. In this example, STA2 is added to the whitelist. Then only STA2 can connect to the wireless network, and STAs not in the whitelist (STA1, STA3, and STA4 in Figure 1) cannot connect to the wireless network through the AP.
As shown in Figure 2, many STAs of local employees exist in an AP's coverage area on a campus network. Guests or visiting employees sometimes bring their laptops to this AP's coverage area. If only STAs of guests or visiting employees are not allowed to connect to the wireless network, the enterprise can configure the blacklist function on the AC and add MAC addresses of these STAs to the blacklist. In this example, STA4 is added to the blacklist. Then STA4 cannot connect to the wireless network through the AP, and other STAs (STA1, STA2, and STA3 in Figure 2) can connect to the wireless network.