topic Re: Automatic MAC account creatation from Cisco WLC in Wireless

Automatic MAC account creatation from Cisco WLC

elodie.lu — Sun, 04 Jul 2021 07:33:00 GMT

We are creating a BYOD network, have any of you tried this?

1) First time user attempts to connect to byod_ssid they are presented with captive portal page that requests AD credentials. In the back ground users MAC address needs to be captured.

2) All subsequent connections to byod_ssid are MAC authenticated.

I am not finding any documentation on this process from the Cisco side. What do you think? Is it possible?

Thanks!

Re: Automatic MAC account creatation from Cisco WLC

Shaoqin Li — Tue, 30 Jul 2013 15:54:35 GMT

you may do this via DRW on ISE

configure ssid with mac filtering, then on ise confignauthz rule with redirect to drw... register your device... CoA sent by ise... connect again and should work

sth similar to below , instead you are using mab

http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_guest_pol.html#wp1220041

Sent from Cisco Technical Support iPad App

Automatic MAC account creatation from Cisco WLC

elodie.lu — Tue, 30 Jul 2013 16:01:40 GMT

Sorry, but I forgot to precise that we don't have an ISE

Automatic MAC account creatation from Cisco WLC

Abhishek Abhishek — Tue, 30 Jul 2013 21:17:53 GMT

Hello,

As per your query i can suggest you the following link to refer-

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080bba10d.shtml

Hope this will help you.

Automatic MAC account creatation from Cisco WLC

elodie.lu — Wed, 31 Jul 2013 07:30:46 GMT

Is there any way to do it without ISE because we don't have this appliance?

Automatic MAC account creatation from Cisco WLC

elodie.lu — Thu, 01 Aug 2013 07:26:19 GMT

is it possible to do this with configuring a Fallback Policy with MAC Filtering and Web Authentication? but with enough security (layer 2 or 3) to avoid mac address spoofing

Re: Automatic MAC account creatation from Cisco WLC

Scott Fella — Thu, 01 Aug 2013 11:13:09 GMT

No... any MAC address has to be manually entered in the WLC. There is no "capture these MAC address and store it" feature on the WLC's.

Sent from Cisco Technical Support iPhone App

Automatic MAC account creatation from Cisco WLC

elodie.lu — Fri, 02 Aug 2013 07:48:52 GMT

What about configuring a Fallback Policy with MAC Filtering and Web Authentication?

I want just use this option.

Normally, there is a local database and with enabling the mac filtering and on MAC Filter Failure I have to find the mac address of the authenticate device on the wlc local database.

Authentication is done via AD credentials on a web portal.

Automatic MAC account creatation from Cisco WLC

elodie.lu — Mon, 05 Aug 2013 10:24:46 GMT

No suggestion?

Re: Automatic MAC account creatation from Cisco WLC

Scott Fella — Mon, 05 Aug 2013 10:55:58 GMT

What exactly are you wanting to do? If you enter the MAC address manually, then that would work. If you expect the WLC to auto generate and store MAC address, it can't.

Sent from Cisco Technical Support iPhone App