howto needed for restrict access by MAC over whole WDS

[Dennisfreud]

I am between a rock and a hard place here. Managing a holiday resort in Spain I want to offer free wifi to my clients and my clients only. There are also private owners and other guests in the house who are using up my bandwith (very limited due to remote location). A conventional password always spreads fast. So I think the only way to lock unwanted users out is to use MAC access restriction in "allow only" mode. Since my clients stay long term the administrative overhead is acceptable.

But how?
1.) most routers I know allow only some 30-ish MAC allow entries. Thats too little for me. I would need 100, would like 200.
2.) How do I set it up? I have a modem router (at present a TP-Link), a wrt54gl connected by wire to modem as repeater bridge and a second wrt54gl as repeater using the wireless signal of the first linksys as source.

Is there any way to solve my proble without using MAC restriction?
If I do need to use MAC restriction, what router can do what I need?
How do I set up the bridges - or do I need to enter all permitted MACs in all devices?

Or is it really no way to do this without a radius server (trying to get that to work almost drove me crazy).

Any comments or advice very welcome and if anyone ever comes to sunny Tenerife Island, gimme a shout.

Dennis

 

[corroded]

Look at the stuff EnGenius offers... they have a WDS management system that they give away...

http://www.engeniustech.com

 

[Dennisfreud]

Look at the stuff EnGenius offers... they have a WDS management system that they give away...

http://www.engeniustech.com

Hi corroded, I looked at their page but cant see what you mean. What of their portfolio could help me? Please?

 

[corroded]

one product is EZcontroller... Webinar recording: http://www.engeniustech.com/component/weblinks/159-data-webinar-archive/92-how-to-use-the-engenius-ez-controller-software-lay-out-wireless-networking-solutions-and-more

and their newer product, the Nuetron line: http://www.engeniustech.com/solutions

both offer a managed WDS environment

 

[bill001g]

Radius is your best bet but you will soon find out that you can not use wireless repeaters when you run radius since now your repeater must also use radius to authenticate. You would have to run as wired AP if you were going to use radius.

If you use repeaters you may be better off trying to restrict via a firewall rule and just let people authenticate to the AP's . That way you don't have to update so many devices. If you run wireless isolation they could not attack other users even if the got on the network. Still I am not so sure how many mac address you can restrict.

There are commercial packages that are designed for hotel hotspot that are not real expensive and would make life easier.