topic Re: Apple MacBook MAC Filter in Wireless

Apple MacBook MAC Filter

Andrey23 — Mon, 05 Jul 2021 18:29:56 GMT

Hello,

I need to filter Apple MacBook and alow it connect to corp SSID.

My corp SSID have 802.1x auth with NPS server.

Who can suggest me what to do?

Filter the MAC address on the NPS? create new SSID and filter on the WLC?

I have WLC 2504

BR,

Re: Apple MacBook MAC Filter

Scott Fella — Mon, 06 Jan 2020 15:42:42 GMT

I don’t understand what you mean? You want MacBooks to connect to 802.1x and not any other SSID? You only want MacBooks to connect to 802.1x and not any other?

Re: Apple MacBook MAC Filter

Andrey23 — Tue, 07 Jan 2020 09:06:01 GMT

I would like to have 1 corp SSID.

All WIN users will authenticate with 802.1x and AppleMAC with MAC FILTER.

Re: Apple MacBook MAC Filter

Scott Fella — Tue, 07 Jan 2020 15:34:43 GMT

When you have one Corp SSID, there is no reason to have multiple types of ways to authenticate as that complicates your overall implementation. If you have one SSID, dot1x, then you should just allow all devices to authenticate via dot1x. To have dot1x and then add a Mac filter list to only allow certain MacBooks, doesn’t make sense. You should have a rule for WIN machines to use computer authentication and or tap-tls and then another rule that uses Mac filter that allows any other devices.

Re: Apple MacBook MAC Filter

Andrey23 — Mon, 13 Jan 2020 13:36:51 GMT

you talking about rules on NPS?

Re: Apple MacBook MAC Filter

Scott Fella — Mon, 13 Jan 2020 15:10:00 GMT

Yes so you have a single point to manage.