What's the terminal equivalent of Windows' netsh wlan add filter? On my windows wifi devices I am able to add wireless network filters to disable connectivity to unwanted signals. 

First I whitelist any networks I deem secure using the following command:

netsh wlan add filter permission=allow ssid=myNetworkName networktype=infrastructure 


Then I blacklist all the others using:

netsh wlan add filter permission=denyall networktype=infrastructure


I recently got a MacBook Air and now I want to do the same thing with it.
What are the terminal equivalents of these cmd commands? 

Thanks in advance!

Edit:

This question is not a duplicate. It's alright if you don't have the answer, but don't mark it resolved just for the sake of it. Leave it up in case someone else knows the answer.

First of all, that script fails to connect most of the time. Secondly, I need a way to stop non-administrators from connecting to ALL networks other than the ones I've white-listed. That solution has you list the 'bannedList' of networks one by one. And it doesn't mention how to force non-admins to connect through the script rather than just using the regular WiFi list or network preferences.

I refuse to believe there is no solution to such a trivial network security question. Especially since it was so easy on Windows.
If it's running High Sierra you can turn off auto-join in the system preferences > network > airport panel.

EDIT: question was unclear.  Here's another answer that might be better for the question-asker.

You can create a 'Profile' to install on the system.


Buy Server.app on the App Store.
Learn about Profiles and how they work.
Create a profile with a restirction that prevents the user from accessing the 'network' control panel.
Make sure the WiFi network(s) it's OK to connect to are already set up - the credentials will be stored in the System keychain, so all users will be able to access them.  If the administrator has connected to networks that other users shouldn't - you'll need to 'forget' those networks or move them from the system keychain to a user one.
Install the profile in the users' account, and make sure to disable the WiFi menu while you're at it, so the only way to change networks - other than the command-line if they figure out how - is through the Network control panel, which is now disabled.