Question

Is it possible to configure more than 128 MAC addresses in a MAC Access Control List (ACL) on Ruckus Unleashed?

Customer Environment

Root Cause

Workaround

If more than 128 MAC addresses need to be authorized on a WLAN, configure the WLAN to use MAC authentication with an external RADIUS authentication server.

MAC authentication is different from MAC ACL filtering.

With MAC authentication, the client's MAC address is validated against the external RADIUS server. The RADIUS database can accommodate significantly more MAC address entries than a local MAC ACL.

Resolution

No. It is not possible to configure more than 128 MAC addresses in a single L2/MAC ACL list.

The MAC ACL is a filtering mechanism used to allow or deny clients based on their MAC addresses. The AP applies the configured ACL to client traffic associated with the WLAN.

For environments requiring authorization of more than 128 MAC addresses, use MAC authentication with an external RADIUS server.

Unlike the local MAC ACL, MAC authentication validates client MAC addresses against the RADIUS user database. Therefore, the practical number of supported MAC addresses depends primarily on the capacity and configuration of the external RADIUS server.