topic Re: Cisco WLC - Find used mac address users in Wireless

Cisco WLC - Find used mac address users

manvik — Mon, 05 Jul 2021 19:16:38 GMT

Using Cisco 5508 Wireless Controller. Users connect to the SSID by MAC-filtering. Over the period of years around 2000 Mac address has been added.

Currently there could be only 300 to 400 active users.

How to find list of MAC address connected or not connected in the last 3,4 months.

Re: Cisco WLC - Find used mac address users

Rafael E — Mon, 13 Jul 2020 11:34:09 GMT

You will not be able to find this information on the WLC. You need another system such as DNAC or PI to track this information.

Re: Cisco WLC - Find used mac address users

manvik — Mon, 13 Jul 2020 11:38:29 GMT

Thank you Rafael,

WLC is integrated with prime infrastructure. Any idea how to pull the data from PI?

Re: Cisco WLC - Find used mac address users

Rafael E — Mon, 13 Jul 2020 13:39:15 GMT

From Report Launch on PI you have a client session report.

You can collect for the past 3 months and check what mac addresses have been connected to that specific SSID.

Re: Cisco WLC - Find used mac address users

patoberli — Mon, 13 Jul 2020 15:44:11 GMT

I would switch from that system, many modern operating systems have started to randomize the WLAN mac address. Some keep it the same, once you've successfully connected, but that is not guaranteed in the future.

Re: Cisco WLC - Find used mac address users

manvik — Tue, 14 Jul 2020 07:36:02 GMT

Thank You Rafael,

I generated report from PI, it included all wired clients too. Anyways I have opened a TAC ticket.

Re: Cisco WLC - Find used mac address users

Rich R — Wed, 15 Jul 2020 00:20:22 GMT

Pat is right - iOS 14 on iPhone (currently in beta) changes the MAC address every 24 hours by default (can be disabled but user must do that manually). Other OS are likely to replicate this behaviour in future. After that MAC address as security will become meaningless and unmanageable so start preparing for that NOW (and we all know it's really not secure anyway because it's trivially easy to spoof the MAC address today). You should be using a secure method like 802.1x to authenticate your clients.

Re: Cisco WLC - Find used mac address users

manvik — Wed, 15 Jul 2020 07:47:59 GMT

Thank you rrudling,

Configurung 802.1x on every user mobile and laptops are not practical. Some other user friendly and easy-to-administer solution should come up.

Re: Cisco WLC - Find used mac address users

Nabeel Aurangzeb — Tue, 06 Dec 2022 04:29:42 GMT

Dear MANVIK,

What TAC team provided you solution?? i have same problem 😞

Re: Cisco WLC - Find used mac address users

Scott Fella — Tue, 06 Dec 2022 06:12:37 GMT

There is no way to get that info from the controller itself. If you read though the post, you can use Prime Infrastructure to gather the client summary. I don’t really know what you get get out of that especially if folks turn on MAC address randomized.