topic WLC 9800 MAC filter multiple wlan in Wireless

WLC 9800 MAC filter multiple wlan

Leo TI — Tue, 01 Apr 2025 19:42:43 GMT

Hi friends, I'm configuring a WLC 9800 17.9.4.a. MAC address filtering works, but it doesn't respect the WLAN space.
For example, I want MAC01 to connect to WLAN profile Test02 but not to WLAN profile Test3, and I want MAC02 to connect to WLAN profile Test3 but not to WLAN profile Test02.
But I see that both devices can connect to any WLAN.

Re: WLC 9800 MAC filter multiple wlan

balaji.bandi — Wed, 02 Apr 2025 06:37:27 GMT

Maybe I am not apparent here. In your screenshot, both are different MAC addresses, and I can see other profiles.

Check some reference guides

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213922-configure-mac-authentication-ssid-on-cis.html

Re: WLC 9800 MAC filter multiple wlan

srimal99 — Wed, 02 Apr 2025 07:11:13 GMT

Can you see auth log ISE or authentication devices , If you are using ISE, have you defined mac group in Endpoint ? may missed out on ISE config.

Re: WLC 9800 MAC filter multiple wlan

Leo TI — Wed, 02 Apr 2025 13:18:40 GMT

Hello, they are different MAC addresses that I want to connect to different WLANs. The problem is that since they are in the independent list of the WLAN I choose, they connect.

Re: WLC 9800 MAC filter multiple wlan

Leo TI — Wed, 02 Apr 2025 13:19:11 GMT

hello

I'm not using ISE, everything is local.

Re: WLC 9800 MAC filter multiple wlan

Scott Fella — Wed, 02 Apr 2025 14:03:44 GMT

Take a look at this thread. Toward the middle, you can see an example of a forum member @JPavonM provided.

https://community.cisco.com/t5/wireless/c9800-mac-filtering/td-p/4494040

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213922-configure-mac-authentication-ssid-on-cis.html#toc-hId-228841407

Re: WLC 9800 MAC filter multiple wlan

Leo TI — Wed, 02 Apr 2025 15:26:35 GMT

Thanks for the collaboration, Scott Fella.
These are the settings I added.

Re: WLC 9800 MAC filter multiple wlan

Scott Fella — Wed, 02 Apr 2025 16:11:24 GMT

If you do have a lab, you should look at Cisco ISE, you can spin that up free for 90 day's at a time and it gives you so much and also one place to look for macs. I use to do local stuff on my home lab and now just run ISE and reset it before the eval license expires.