> For the complete documentation index, see [llms.txt](https://doc.engenius.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doc.engenius.ai/home-cloud-user-manual/configuring-networks/access-control.md).
# Client Access Control
In some cases, it is necessary to block a specific client on a network. This configuration will apply to the whole network and will affect the client immediately.
## Blocked List
Navigate to **Configure** > **Client** **Access Control > Rules > Block list** to access this screen.
You could block clients in all SSIDs in the current network or on an SSID basis depending on your requirements. This blocked list displays which you added the blocked clients in **SSID** > **Access Control** and **Manage > Clients**. So you could manage whole blocked clients easily in single lists.
{% hint style="info" %}
**Good to know**
AP PRO Feature Plan: 1000 entries. Basic mode:100 entries.
{% endhint %}
### How to block clients
1. Click **Add** in the top-right corner.
2\. Enter the **Mac Address**, select the **Scope** ( All SSIDs in current Network or SSID basis), then click **Apply**
### How to Unblock Clients
1\. Select the clients on the lists
2\. Click **Unblock**
## VIP Lists
All VIP clients can bypass the Captive portal. **Wired** VIP clients can bypass L2 isolation.
If **wireless** printer/scanner/IoT to be accessible, pls make sure the wireless printer/scanner/IoT devices are under the SSID of
* **Bridge** mode
* L2 Isolation is **disabled**
* Optional: If captive portal is enabled on the SSID, the “VIP” can let the IoT skip captive portal entry
If **wired** printer/scanner / IoT device to be accessible, then
* Make the devices be “**VIP**” to all SSIDs (or to the SSIDs for the wireless clients to be able to access)
* Any wireless client can access. No matter if NAT/Bridge mode. L2 Isolation can be enabled/ disabled
You could add the VIP clients in the current network or on SSID basis depending on your requirements. This VIP list displays which you added the VIP clients in **SSID** > **Access Control** and **Manage > Clients**. So you could manage whole VIP clients easily in single lists.
{% hint style="info" %}
**Good to know**
AP PRO feature plan:1000 entries. basic mode:100 entries.
{% endhint %}
### How to Add VIP clients
1. Click **Add** in the top-right corner.
2\. Enter the **Mac Address**, select the **Scope** ( Current Network or SSID basis), then click **Apply**
### How to remove VIP clients
1\. Select the clients on the lists
2\. Click **Delete**
{% hint style="info" %}
\
If L2 isolation is enabled, the VIP clients will be excluded, which means clients under the subnet can access this client even if L2 isolation is on (Only wired clients can take effect )
If NAT mode, "client isolation” will be enabled automatically
{% endhint %}
## Whitelist
You could block clients in all SSIDs in the current network or on an SSID basis depending on your requirements. This Whitelist displays which you added the white clients in **SSID** > **Access Control** and **Manage > Clients**. So you could manage whole whitelist clients easily in single lists.
The default Client Access Control is Blocklist, so you need to change the default ACL Rule to **Allow whitelist only**, so your whitelist client will take effect.
{% hint style="info" %}
**Good to know**
AP PRO feature plan: 1000 entries. basic mode: 100 entries.
{% endhint %}
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://doc.engenius.ai/home-cloud-user-manual/configuring-networks/access-control.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.