topic Re: Mac-address binding and SSID grouping in Wireless

Mac-address binding and SSID grouping

King_1988 — Sat, 29 Jun 2024 01:37:42 GMT

Hi,

I have two queries regarding WLC 3504 :

1. For MAC binding, we can only give entry of MAC-address manually in WLC-3504, which is very much time consuming and error-prone. Is there any option of uploading mac-address along with user in any excel/csv format?

2. Can we assign any specific SSID profile to a specific AP so that the AP will not broadcast any other SSID in cisco WLC 3504?

Re: Mac-address binding and SSID grouping

Leo Laohoo — Sat, 29 Jun 2024 01:53:56 GMT

@King_1988 wrote:
Can we assign any specific SSID profile to a specific AP so that the AP will not broadcast any other SSID in cisco WLC 3504?

Depends on complexity, this is what Dot1X is all about.

Cisco ISE is capable of doing this and other vendors/competitors (like Aruba's ClearPass).

Re: Mac-address binding and SSID grouping

King_1988 — Sat, 29 Jun 2024 04:02:29 GMT

Is the below requirement possible?

Re: Mac-address binding and SSID grouping

Leo Laohoo — Sat, 29 Jun 2024 04:18:55 GMT

MAC bind to what, IP address, VLANs?

Share the scenario because "MAC binding" can be a very broad term depending on how it is deployed & employed.

Re: Mac-address binding and SSID grouping

King_1988 — Sat, 29 Jun 2024 07:39:01 GMT

MAC bind to IP address

Re: Mac-address binding and SSID grouping

Leo Laohoo — Sat, 29 Jun 2024 10:39:46 GMT

@King_1988 wrote:
MAC bind to IP address

Any DHCP server can do that.

Re: Mac-address binding and SSID grouping

Rich R — Sun, 30 Jun 2024 15:02:45 GMT

> 2. Can we assign any specific SSID profile to a specific AP so that the AP will not broadcast any other SSID in cisco WLC 3504?
That's exactly what AP groups are for!
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/configuring_ap_groups.html

MAC-IP is a DHCP function.
It sounds like you are trying to configure a static ARP (which is what MAC to IP is) on the WLC - why?
Are you referring to https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/global_traffic_forwarding_configurations.html#ID2851 ? That just turns binding on or off though.
Provide the exact page/menu/option you are referring to and/or a screenshot.
Generally speaking you can provide any config via CLI which you could automate with the right scripting.

Or maybe you are referring to local MAC filters? (which are a really bad idea because any client can change their MAC address):
The CLI for that is at https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/wlan_security.html#local-mac-filters which you could easily script.