topic MAC Filtering with Anchors in Wireless

MAC Filtering with Anchors

roadhouse1387 — Mon, 05 Jul 2021 11:05:03 GMT

Hi All,

quick question, I need to configure MAC filtering to allow a client to access a network attached to an anchor controller.

There is an existing web passthrough wlan on the foreign controller which allows guests to access the internet on a dynamic interface on the anchor controller in the usual manner, which works fine (DHCP is via the anchor controller locally and there are no AP's on the anchor). Now there is a requirement to allow a handfull of devices to access the internet using mac filtering.

So I will set up another SSID for now on both controllers and anchor them together, then , on the anchor, I candrop them onto the same dynamic interface as the current web passthrough WLAN uses, which should work ok.

However, my question is this, do i configure the local MAC filter list of allowed MACs on the foreign or anchor controller or both ?

also, in the event of scaling this to use radius, who sends the radius requests for mac clients ? the anchor or the foreign controller ?

Many Thanks

bumping this in the hope

roadhouse1387 — Sat, 12 Dec 2015 15:48:47 GMT

bumping this in the hope someone can help ?

i have looked at mac bypass on failure but the current anchor uses a web passthrough page.

im just looking to create an open SSID with a mac list on the (anchor presumably ?) WLC.

Am i going to be able to do this ok

So how this works... Been a

Scott Fella — Sun, 13 Dec 2015 19:25:22 GMT

So how this works... Been a while:), if a device doesn't hit the Mac filter, fails, then the device is redirected to webauth. So since your using Passthrough, this becomes a "work around". You will have to create a a webauth page and then customize that page to have a username and password in which the fields are hidden and you set a value for those fields. You would create a generic local user account for this value. Since the field is hidden and when a user hit accept, the controller will use a webauth, but it's really seen as Passthrough because the fields are hidden and the end user can't change that. This is how you can "work around" and be able to use the Mac filter failure option.

Hope this helps

-Scott

*** Please rate helpful post ***

What if you are using PSK for

Eric Glodowski — Wed, 16 Mar 2016 18:11:12 GMT

What if you are using PSK for the SSID on the foreign/anchor? Would MAC Filtering need to be checked on the WLAN of the foreign WLC? Would I need to configure the RADIUS auth server on the foreign as well? Or just the anchor?

Testing confirms RADIUS

Eric Glodowski — Thu, 17 Mar 2016 19:18:38 GMT

Testing confirms RADIUS server config is required only on anchor.