@JessieG 

Don't worry about it, if the clients don't pass the authentication, they will not affect your network. 

Besides, according to the portal authentication, the AP will disconnect them if they don't pass the authentication in 90 seconds. 

if they don't pass the authentication in 90 seconds. 

@forrest 

Thats the problem, they are connected to the network for 4-6hrs already and when I checked the log and past authentication they didn't login. I think its because of the static IP add?

And the annoying part I got 3pages of blocked clients with the same first 3 Mac Address, I tried limiting the rate to 1kbps but they only change to another mac address. So annoying hope they can't do anything bad.

I'm trying yo look for anyway to ban a range mac address, is thay possible in EAP series? like Mac filter? but hopefully they won't affect my service and my customer.

Regards, 

@JessieG 

We have MAC Filter on the Controller.

@forrest 

Yup tried that but you can only add a single mac address at a time. I'm looking for a site to help me create a mac address range but someone replied it will take 16M mac address for creating just the 6 last digits. *toinks*

If this keeps up, I'll just need to create a more strict login implementation, like first time login need to register to me? or first time login needs to text me? a combination of 2 login portal? need to brain storm this and thanks!