lock down WIFI to only mac address

[dirkdigs]

Can somebody tell me how i would lock down the wifi (specific SSID ) to a specific MAC address.? Where I would set this up on a 100D.

[Bromont_FTNT]

What firmware version? On newest fiirmware you' d authenticate mac against Radius server via CLI: config wireless controller vap edit SSID set radius-mac-auth enable set radius-mac-auth-server <server> end

[dirkdigs]

a radius server? seems like overkill. is there no other option. no MAC filtering on the FortiGate itself?

[Bromont_FTNT]

There used to be MAC filtering on the Fortigate itself but I think it was removed

[selvam_FTNT]

You can create MAC deny list under WTP-profile configuration and MAC Reservation + Access Control under DHCP server. Please check if they can help.