topic Re: Cisco Autonomus 1131AG With Authentication PSK + Mac Filtering in Wireless

Cisco Autonomus 1131AG With Authentication PSK + Mac Filtering

Alejandro Alcantara — Mon, 05 Jul 2021 14:47:41 GMT

Hello Experts.

I'm working with two 1131AG Aironet APs Autonomus, right now I have just one SSID with WPA2-PSK authentication method and everything is working fine, but my client asked for add mac filtering authentication,

I'm not sure if this AP can do it by itself and I'm not sure how to configure it.

I read this post and I saw it is using an authentication server.

Anyone know something about it?

Thanks in advance

Re: Cisco Autonomus 1131AG With Authentication PSK + Mac Filtering

Flavio Miranda — Wed, 01 Nov 2017 16:17:41 GMT

Hi,

Have you tried this?

access-list 701 deny 0000.0000.0000

Config terminal
dot11 association mac-list 701
end

-If I helped you somehow, please, rate it as useful.-

Re: Cisco Autonomus 1131AG With Authentication PSK + Mac Filtering

Alejandro Alcantara — Wed, 01 Nov 2017 17:15:49 GMT

Never... 😞

Re: Cisco Autonomus 1131AG With Authentication PSK + Mac Filtering

Alejandro Alcantara — Wed, 01 Nov 2017 18:04:19 GMT

Hi Flavio.

I look for you comment so.. if I get it right I can do it in this way...

access-list 701 permit 0016.6f38.5a75   0000.0000.0000
access-list 701 permit 0016.6f47.2f5a   0000.0000.0000
access-list 701 permit 0016.6f72.8730   0000.0000.0000
access-list 701 permit 0016.6f6b.c156   0000.0000.0000

access-list 701 deny 0000.0000.0000 ffff.ffff.ffff

Config terminal
dot11 association mac-list 701
end

Is that correct?

Re: Cisco Autonomus 1131AG With Authentication PSK + Mac Filtering

Flavio Miranda — Wed, 01 Nov 2017 18:20:52 GMT

Yeah, this should work!

-If I helped you somehow, please, rate it as useful.-

Re: Cisco Autonomus 1131AG With Authentication PSK + Mac Filtering

Alejandro Alcantara — Wed, 01 Nov 2017 23:28:06 GMT

Thanks Flavio.
It works, but right now I have another question.
The ACL is applied to the Radio interface, this solution can be apply for SSID?
I was wondering... If I have subinterfaces per SSID I can apply it in each one?

Re: Cisco Autonomus 1131AG With Authentication PSK + Mac Filtering

Flavio Miranda — Wed, 01 Nov 2017 23:51:25 GMT

Unfortunately is not possible:

Note The list is global. A MAC address defined in the list will be authorized to join any SSID where MAC address authentication is enabled. If you want to use different lists of MAC addresses for different SSIDs on the AP, you must use an external RADIUS server.

-If I helped you somehow, please, rate it as useful.-

Re: Cisco Autonomus 1131AG With Authentication PSK + Mac Filtering

Alejandro Alcantara — Wed, 01 Nov 2017 23:58:39 GMT

Thanks Flavio 🙂