- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-25-2015 03:28 AM - edited 07-05-2021 03:17 AM
Hello All,
We have two autonomous AIR-SAP2602I-E-K9 APs. Is it possible to use MAC filtering with WEP or WPA? So devices trying to connect to the APs must use the WEP or WPA key and must be in the allowed MAC list.
Many thanks for your replies.
Abu
Solved! Go to Solution.
- Labels:
-
Wireless Security
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-25-2015 04:17 AM
Using MAC Address ACLs to Block or Allow Client Association to the Access Point
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/12-3_2_JA/configuration/guide/i1232sc/s32filt.html#wp1039154
then just do your wpa config
___________________________________________________________
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-25-2015 03:54 AM
Yes you can do an acl on the ap for Mac filter and the wep/psk.
___________________________________________________________
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-25-2015 04:12 AM
Hi George,
Thanks for your reply. Could you please point to any guide?
Regards
Abu
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-25-2015 04:17 AM
Using MAC Address ACLs to Block or Allow Client Association to the Access Point
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/12-3_2_JA/configuration/guide/i1232sc/s32filt.html#wp1039154
then just do your wpa config
___________________________________________________________
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-25-2015 04:53 AM
Thank you very much George.
I was doing it under MAC address authentication and going wrong there and then I read
"A. The Cisco AP does not support local MAC authentication and Wi-Fi Protected Access Pre-share Key (WPA-PSK) in the same Service Set Identifier (SSID). When you enable local MAC authentication with WPA-PSK, WPA-PSK does not work. This problem occurs because local MAC authentication removes the WPA-PSK ASCII password line from the configuration." here http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/68583-FAQ-Wireless-Security.html
I don't understand this bit from the link you gave, sorry for being thick:
"Step 9 Select Forward All or Block All from the Default Action menu. The filter default action must be the opposite of the action for at least one of the addresses in the filter. For example, if you enter several addresses and you select Block as the action for all of them, you must choose Forward All as the filter default action."
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2015 07:57 AM
Excellent .. Thanks for supporting the rating system ..
___________________________________________________________
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2015 07:48 AM
Thanks a lot George, it worked.
