topic Cisco WLC only allow PC/MAC OS connect? in Wireless

Cisco WLC only allow PC/MAC OS connect?

cherrykit — Sun, 04 Jul 2021 04:41:12 GMT

Dear All,

Is there any way to config the WLC only allow PC or MAC OS to connect to WLC? So many IPhone/Android/IPad....etc are using out network and we would like to disconnect all mobile device in one go, other than MAC filtering, any idea? Thanks!

Frankie

Cisco WLC only allow PC/MAC OS connect?

Stephen Rodriguez — Wed, 29 Feb 2012 15:01:29 GMT

You would need something that can 'fingerprint' a device to know what it is, and allow/disallow on the device type.

take a look at the Cisco ISE offering.

http://www.cisco.com/en/US/customer/products/ps11640/index.html

Steve

Cisco WLC only allow PC/MAC OS connect?

cherrykit — Wed, 29 Feb 2012 15:18:34 GMT

Thanks for your reply

Is it only this way to do? Any MAC address pattern that I can follow and set it into the MAC filtering?

Cisco WLC only allow PC/MAC OS connect?

Stephen Rodriguez — Wed, 29 Feb 2012 15:29:21 GMT

No. The OUI portion of the MAC address will just identify the manufacturor, not the device.

For example, just looking at the OUI you can't differentiate a Mac Book from an iPad, as both OUI would just show Apple Inc.

Steve

Cisco WLC only allow PC/MAC OS connect?

George Stefanick — Wed, 29 Feb 2012 17:10:49 GMT

As Steve points out ISE is the way to go.

ISE uses "probes"

Radius

DHCP Finger Print

HTTP

From these probes it can ID what the device is and then depending on your needs shuffle the devices around.

Cisco WLC only allow PC/MAC OS connect?

Ven Taylor — Wed, 29 Feb 2012 19:54:22 GMT

What kind of authentication are you using? If you're using web auth or open auth, you may be stuck.

You could use something clunky like machine certificates. This way, you control who gets on the network.

However, it becomes a nightmare for the helpdesk when people have to change their passwords. The certs stop working on Mac. My old company had it like this and they hated it, but it kept mobile devices off.

If you really want to control your mobile device access, you're going to have to spend some cash.

Just out of curiosity, why do you want to keep mobile devices off your wireless?

Ven