Quarantine

Currently, if we need to prevent a device from connecting, it is blocked by MAC address on the controller.

The device registration LDAP includes a prohibited field, which is used during authorization. Any device connecting with a banned MAC is placed in the unauthenticated network, irrespective of registration, and is put behind a captive portal.

This captive portal will be a static page without a network login. Instead, it will display a message saying the device has been blocked and that the user should contact 4Help.