topic Re: Dynamic mac address authentication in Wireless

Dynamic mac address authentication

manvik — Tue, 28 Jun 2022 05:02:05 GMT

how's everyone tackling the dynamic MAC address challenge in new android & Mac devices. Our SSID is MAC filtered, MAC address is added to WLC and those are permitted to connect.

Issue is client device MAC address keeps on changing as it has dynamic mac enabled.

Re: Dynamic mac address authentication

Ambuj M — Tue, 28 Jun 2022 05:23:34 GMT

I understand you don’t have ise, but this might give you a good outlook on your problem

https://community.cisco.com/t5/security-documents/random-mac-address-how-to-deal-with-it-using-ise/ta-p/4049321

there is no silver bullet to this issue, if it’s managed device then you can use MDM to turn off max randomization, otherwise move away from MAB to 802.1X, MAB it’s highly insecure anyways.

hope this helps

Re: Dynamic mac address authentication

manvik — Tue, 28 Jun 2022 06:49:07 GMT

@Ambuj M you are right, we are not using ISE or MDM. I think there's no option now we can't use WLC MAC filtering until client turns of dynamic mac address.

Re: Dynamic mac address authentication

Flavio Miranda — Tue, 28 Jun 2022 10:47:16 GMT

This feature only make netadmin lifes harder. To me, the best option is disable it. I see no gain and a lot of problem, inclusive in ISE.