topic Re: Is it possible to exclude selected clients from WLC WEBAUTH? in Wireless

Is it possible to exclude selected clients from WLC WEBAUTH?

yprasannas — Sun, 04 Jul 2021 04:42:53 GMT

We use NOMADIX for only banner implementaion. So client gets authenticated by WLC and has to click OK on the banner. Could have used WLC for this but sometimes we need to exclude few devices that are not capable of clicking OK on banner. Would be helpful if WLC has the exclude feature.

Is it possible to exclude selected clients from WLC WEBAUTH?

Ven Taylor — Fri, 02 Mar 2012 20:15:22 GMT

You can deny access based on mac address.

On WLC, go to Security tab, choose Disabled Clients, and click the "New" button.

At my old company, we would use this when we got log entries on our firewall for people surfing porn on their iPhones.

They would then call the helpdesk and ask why they can't get on the wireless and we could refer them to the security team.

Ven

Is it possible to exclude selected clients from WLC WEBAUTH?

yprasannas — Fri, 02 Mar 2012 20:20:38 GMT

I do not want to deny access...some devices need extra privelege of not clicking banner after WLC authentication. In NONADIX we can give list of devices and they are home free. Example...environmental monitors, etc.

Re: Is it possible to exclude selected clients from WLC WEBAUTH?

nikhilcherian — Fri, 02 Mar 2012 21:41:11 GMT

Put mac-filtering and add your clients and go for web-policy On MAC Filter failure, this is supported in 7.0.116.0. I am not sure, which release this feature was introduced

Thanks

NikhiL

Is it possible to exclude selected clients from WLC WEBAUTH?

yprasannas — Fri, 02 Mar 2012 21:45:01 GMT

There are unknown clients joining the SSID, clicking the banner so I do not know their MAC address.

I only know the MAC address for the devices that do not want to use WEBAUTH.

Re: Is it possible to exclude selected clients from WLC WEBAUTH?

nikhilcherian — Fri, 02 Mar 2012 21:46:39 GMT

You enable mac-filtering and add those client -mac which you dont have to use web-auth, so that when they join they get authenticated. Those clients whose mac wasnt added, will fail authentication and go for web-auth

Thanks

NikhiL

Re: Is it possible to exclude selected clients from WLC WEBAUTH?

nikhilcherian — Sat, 03 Mar 2012 10:38:05 GMT

Did this resolve your issue

Re: Is it possible to exclude selected clients from WLC WEBAUTH?

yprasannas — Mon, 05 Mar 2012 15:15:43 GMT

I will implement this in couple of days and will let you know.

Thanks for the tip!

Is it possible to exclude selected clients from WLC WEBAUTH?

yprasannas — Mon, 12 Mar 2012 17:45:35 GMT

The option "On MAC Filter failure" show the banner worked to not show banner....but found an issue...for the users that need banner, they are in a loop. When they click ok the banner comes back.

The issue goes away if I disable MAC Filter Failure....all users can click OK and get redirected to the right destination.

Is it possible to exclude selected clients from WLC WEBAUTH?

nikhilcherian — Mon, 12 Mar 2012 18:10:58 GMT

or the users that need banner, they are in a loop

what does the above the line means

When they click ok the banner comes back.

please elaborate this also