topic Re: Web Auth with Mac Filtering in Wireless

Web Auth with Mac Filtering

Nicholas Copeland — Sun, 04 Jul 2021 06:38:08 GMT

I am trying to setup a scenario where a user logs in via Web Auth and witha successfull connection the Mac Address is remembered for 7 days. That way if the user connects again during the course of 7 days they aren't required to authenticate via web auth again they just get access. After 7 days they will need to login again through the web auth. Similar scenario to what you see at a Hotel wireless network. Anyone know how I would go about setting up the dyanmic mac filtering and set the timer for 7 days? With that said I want it to be for a single SSID.

Web Auth with Mac Filtering

Scott Fella — Wed, 27 Feb 2013 18:30:21 GMT

Not possible.... the reason being is the max timer for the session timeout on the guest WLAN. Also when the user sits idle, the idle timeout start counting down. So having the WLC remember the mac address and allow x number of days before having to log back on, is not possible.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

Web Auth with Mac Filtering

Nicholas Copeland — Wed, 27 Feb 2013 20:21:24 GMT

That's what I was afraid of. But kind of what I thought based off some of the research I have done.

Re: Web Auth with Mac Filtering

Scott Fella — Wed, 27 Feb 2013 20:37:26 GMT

Yeah it been asked many times so maybe one day it will be possible.

Sent from Cisco Technical Support iPhone App

Re: Web Auth with Mac Filtering

Stephen Rodriguez — Wed, 27 Feb 2013 20:43:23 GMT

well, it's not possible with just the WLC.

You can do it, but you need to have a way to pull the MAC address from the webauth page, and insert that into a LDAP db, which you control the age out process in.

Then on a subsequent visits they get mac-authed instead of having to re-accept the page.

in the webauth config you would check the On MAC filter failure box.

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

Web Auth with Mac Filtering

Nicholas Copeland — Wed, 27 Feb 2013 20:54:07 GMT

Yes so that is kind of what I will do with ISE. I just won't be able to age out the device from the db automatically. It will have to be a manual process from my understanding with the latest version of ISE.