Hello Johannes, > > Meanwhile now it is not yet clear to me what should be done for driver which > > supports MAC-based ACL, but not full-fledged AP SME. > > Are you sure that such a device can even exist? It'd have to drop the > auth frames, so they can't be handled by the host? Is there much point > in that? I guess it should be possible to do some kind of source address filtering in hardware. But it looks like your question is whether it makes sense or not. Probably not, I have no idea. By the way, what do you think about making MAC-based ACL capability the first bit in enum nl80211_ap_sme_features ? Regards, Sergey