topic Re: User level in Wireless

User level

nstr1 — Tue, 17 Aug 2021 00:02:33 GMT

I have a 9800 controller 16.12
in it I have some SSIDs configured with MAC filtering.

I want to create a user that can only register MAC.

I've been checking and I only see admin, monitoring and lobby level.

And none of them do what I want.

Is there a way to create the type of user I want ???

Re: User level

balaji.bandi — Tue, 17 Aug 2021 00:09:33 GMT

I want to create a user that can only register MAC. - is this end user device like to use MAC Authentication ? ( do you have ISE or Radius in place ?) ( i believe you can do with MAB authentication(

I've been checking and I only see admin, monitoring and lobby level. - this is local users to manage the device (that is what iam guessing where you looking- based on the information).

Re: User level

nstr1 — Tue, 17 Aug 2021 01:21:01 GMT

No, I don't have ISE

Re: User level

Arshad Safrulla — Tue, 17 Aug 2021 20:34:15 GMT

You need TACACS+, Enable TACACS for user and command authentication. But I don't think this can be done via GUI, but from CLI you can give a try.

In ISE you can limit the commands allowed for that particular user or group. I have not done myself as none of the WLC's I manage or support have this requirement, please let us know how it goes.

Re: User level

balaji.bandi — Wed, 18 Aug 2021 09:51:07 GMT

If you do not have RADIUS / TACACS, you need to manually allow what user need to use command, (that will be more admin task and hard to maintain in each device)