WLC9800 macfiltering for multiple SSID using Attribute List?

eeebbunee — Mon, 09 Oct 2023 20:01:34 GMT

Hello Professionals,

I'm configuring 3 SSIDs and those has same security conditions. (WPA/WPA2 - Macfiltering)
I would like to grant different connect rights for each devices. For example)
- SSID: AAA
- SSID: 123
- SSID: 000

and there are 2 client devices.
# Device-1: Only allow to access SSID-AAA.
# Device-2: able to connect both SSID. (AAA and 123).
# None of devices can't be access to SSID-000.

* Attribute List:
1) User_List: SSID - AAA
2) Manager_List: SSID-AAA, SSID-123.

* Device authentication list:
1) Device-1 : User_List - WLAN policy(user)
2) Device-2 : Manager_list - none

Device-1 is able to connect SSID-AAA correctly, and working good.
However, none of SSID can be connectable for Device-2.

The attribute list has AND condition? not the OR condition?
How can I make multiple SSID accessible?

When I use AirOS controller, I was able to set device can access only one SSID or All.
Does WLC9800 does same?

Thank you for your comment.

Re: WLC9800 macfiltering for multiple SSID using Attribute List?

Mark Elsen — Tue, 10 Oct 2023 07:52:47 GMT

- 'In general' , when things are not working as expected you can have a checkup of the controller configuration with the CLI command show tech wireless ; feed the output into : Wireless Config Analyzer

When a client can not connect to particular SSID use client debugging according to https://logadvisor.cisco.com/logadvisor/wireless/9800/9800APJoin which you can have analyzed with Wireless Debug Analyzer

You may also find this thread useful : https://community.cisco.com/t5/wireless/c9800-mac-filtering/td-p/4494040

topic WLC9800 macfiltering for multiple SSID using Attribute List? in Wireless

WLC9800 macfiltering for multiple SSID using Attribute List?

Re: WLC9800 macfiltering for multiple SSID using Attribute List?