Deny or Isolate any and all unknown devices (by MAC)?

[Patrick M. Hausen]

Also, it does not even work over different APs, only for devices connected to the same AP.

Or a bunch of Mikrotik APs managed by the same CAPsMAN with traffic processing on-capsman instead of on-cap. That feature turns them into a single AP, essentially. I have finally got it to work and I can show you on Friday. I run on-cap, though, i.e. traffic is processed on each managed AP.

[meyergru]

If only Mikrotik configuration was not such a hassle... I like Unifi for everything switching and APs.

[nero355]

Sounds like a job for RADIUS but ALL of your networking equipment needs to support it :)

VMPS - very Cisco specific 😉

And yes, FreeRADIUS has got a backend for that.

you need client support

Not for VMPS. That's the good part. It "simply" does dynamic MAC address <> VLAN mapping.

802.1x is a different matter, correct.

I will look up VMPS but I really meant 802.1x in this case ;)

If only Mikrotik configuration was not such a hassle... I like Unifi for everything switching and APs.

I have got one UniFi Switch making weird noises since a week or so : https://community.ui.com/questions/US-8-started-making-a-weird-noise-Time-to-replace-the-capacitors/43594bc0-9399-4354-ac63-01473fb34c74

And I think I will replace it with this one : https://www.zyxel.com/global/en/products/switch/gs1200v3-series/specifications (GS1200-8v3)
Costs just € 23 and seems to be just as good for the thing I need it to do :)

The only thing that's really difficult is replacing the In Wall units should I ever need to.
Maybe I will have a look at MikroTik despite not really liking their CLI syntax from what I can remember...

In the end I want to migrate everything to devices with their own webGUI or SSH access (or both) and no longer have to mess around with that stupid UniFi Controller since they ruined everything starting with version 6.x.x when everything became so bloated !!! :(
Despite needing Java and MongoDB the last 5.x.x version was IMHO a lot better than all that nonsense they are doing now...