topic I'm also having trouible in Wireless

Mac-Filtering with FlexConnect

awatson20 — Mon, 05 Jul 2021 07:14:58 GMT

I have AP's in Flexconnect Mode doing local switching, central auth. For a particular WLAN, we are using mac-filtering. When creating the local mac filter, should we select none under interface name where you would normally map the interface for the mac-address entry since the clients are local switched? Or does this matter?

Mac-Filtering with FlexConnect

Scott Fella — Thu, 20 Feb 2014 23:48:06 GMT

Mac-filtering isn't supported on FlexConnect local switching, only on central switching and local mode AP's.

Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

Mac-Filtering with FlexConnect

Scott Fella — Thu, 20 Feb 2014 23:49:45 GMT

Here is a link:

http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/112042-technote-product-00.html#anc7

Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

Re: Mac-Filtering with FlexConnect

awatson20 — Fri, 21 Feb 2014 00:00:12 GMT

Thanks Scott. Please correct me if I'm wrong, but according to that doc Mac filtering is supported with flexconnect local switching, not local auth. Am I reading this incorrectly?

Sent from Cisco Technical Support iPhone App

Mac-Filtering with FlexConnect

Scott Fella — Fri, 21 Feb 2014 00:07:51 GMT

Yes that is correct.... so keep that in mind if the ap's goes into stand alone. Mac-filtering is done the same way as local mode AP's.... you enter the mac address and the choose the wlan... interface doesn't matter for flexconnect.

Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

Mac-Filtering with FlexConnect

Scott Fella — Fri, 21 Feb 2014 00:09:08 GMT

What is the purpose you want to use mac-filtering?

Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

Re: Mac-Filtering with FlexConnect

awatson20 — Fri, 21 Feb 2014 00:18:52 GMT

It has to do with these particular clients and the lack of supporting 802.1X. I understand mac-filtering is not very secure.

Although it appears to be working, I had my doubts because the clients were just showing 0.0.0.0 for ip address. We have the "learn client IP address checked" under the wlan, but I cannot see the IP address.

Mac-Filtering with FlexConnect

Scott Fella — Fri, 21 Feb 2014 00:23:18 GMT

Yeah.... there are limitations to what the WLC has visibility to.... only when traffic comes back to the WLC, will the WLC have that information. Take a look at the client statistics from the monitor tab and compare that to a client that is connected to a local mode AP or an ssid that is centrally switched. As long as you only see the clients you allow on the WLAN, then your good.

Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

I'm also having trouible

Paul O'Brien — Fri, 14 Mar 2014 16:26:06 GMT

I'm also having trouible applying MAC Filtering to a locally switched/centrally authourised WLAN

We are using WPA2 with dot1x AKM. It works fine until I enable MAC Filtering

In the MAC Filter I have tried using None/management/<Dynamic Interface> and none of these work

Is there a chance the AP is using local auth even though it can see the WLCs?