STA Blacklist and Whitelist

Security Policy

On a WLAN, a blacklist or whitelist can be configured to filter access requests from STAs based on specified rules, allowing authorized STAs to connect to the WLAN and rejecting unauthorized STAs.

Whitelist

A whitelist contains MAC addresses of STAs that are allowed to connect to a WLAN. After the whitelist function is enabled, only the STAs matching the whitelist can connect to the WLAN.
Blacklist

A blacklist contains MAC addresses of STAs that are not allowed to connect to a WLAN. After the blacklist function is enabled, STAs matching the blacklist cannot connect to the WLAN.

If the whitelist or blacklist function is enabled but the whitelist or blacklist is empty, all STAs can connect to the WLAN.

Configuration Method

Multiple STA whitelist and blacklist profiles can be configured on a switch and applied to different Virtual Access Point (VAP) profiles or Access Point (AP) system profiles. In a VAP profile or AP system profile, either the STA whitelist profile or STA blacklist profile takes effect at one time.

Configure an STA whitelist.

Configure an STA whitelist profile.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] sta-whitelist-profile name sta-whitelist-profile1  //Create a whitelist profile named sta-whitelist-profile1.
[HUAWEI-wlan-whitelist-prof-sta-whitelist-profile1] sta-mac 2C27-D720-746B  //Add an STA MAC address.
[HUAWEI-wlan-whitelist-prof-sta-whitelist-profile1] quit

Apply the STA whitelist profile to a VAP profile or AP system profile based on site requirements.

Apply the STA whitelist profile to a VAP profile.

[HUAWEI] wlan
[HUAWEI-wlan-view] vap-profile name vap1  //Create a VAP profile named vap1.
[HUAWEI-wlan-vap-prof-vap1] sta-access-mode whitelist sta-whitelist-profile1  //Bind the sta-whitelist-profile1 STA whitelist profile to the vap1 VAP profile.

Apply the STA whitelist profile to an AP system profile.

[HUAWEI] wlan
[HUAWEI-wlan-view] ap-system-profile name ap-system1   //Create an AP system profile named ap-system1.
[HUAWEI-wlan-ap-system-prof-ap-system1] sta-access-mode whitelist sta-whitelist-profile1  //Bind the sta-whitelist-profile1 STA whitelist profile to the ap-system1 AP system profile.

Configure an STA blacklist.

Configure an STA blacklist profile.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] sta-blacklist-profile name sta-blacklist-profile1  //Create a blacklist profile named sta-blacklist-profile1.
[HUAWEI-wlan-blacklist-prof-sta-blacklist-profile1] sta-mac 3C27-D720-746B  //Add an STA MAC address.

Apply the STA blacklist profile to a VAP profile or AP system profile based on site requirements.

Apply the STA blacklist profile to a VAP profile.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] vap-profile name vap1  //Create a VAP profile named vap1.
[HUAWEI-wlan-vap-prof-vap1] sta-access-mode blacklist sta-blacklist-profile1  //Bind the sta-blacklist-profile1 STA blacklist profile to the vap1 VAP profile.

Apply the STA blacklist profile to an AP system profile.

[HUAWEI] wlan
[HUAWEI-wlan-view] ap-system-profile name ap-system1   //Create an AP system profile named ap-system1.
[HUAWEI-wlan-ap-system-prof-ap-system1] sta-access-mode blacklist sta-blacklist-profile1  //Bind the sta-blacklist-profile1 STA blacklist profile to the ap-system1 AP system profile.