Hi, > Is that means we have to manually added the client MAC into radius one by > one? well, you want to restrict it to known devices....so ONE way is to add the allowed MACs to a DB - they could be added to some other lookup table. alan