To permit access to specific devices on, for example, the CCoIP wifi, apply a config such as this:

Interface d0.151
bridge-group 151 input-address-list 751
exit
access-list 700 permit 001d.e07f.xxxx   0000.0000.0000
bridge 1 protocol ieee


This *should* permit access through the radio sub interface from the highlighted device but deny all other devices. Cisco ACLs implicitly deny all traffic so no deny statement should be needed.



 --------------------------------------------------------


To deny access to specific devices on, for example, the public wifi, apply a config such as this:

Interface d0.151
bridge-group 151 input-address-list 751
exit
access-list 751 deny   0026.b0c1.xxxx   0000.0000.0000
access-list 751 deny   001c.b32c.xxxx   0000.0000.0000
access-list 751 permit 0000.0000.0000   ffff.ffff.ffff
bridge 1 protocol ieee

This *should* deny access through the radio sub interface from those 2 highlighted devices but allow all other devices to communicate as normal.