Cisco 1941W configure mac authentication in wireless

[Chin]

Dear all, 

    Appreciate that anyone know how to configure mac authentication in 1941w router?

    Perhaps can show me some example of configure mac authentication in 1941w router. 

[Sandeep Sharma]

Hi,

Below is the configuration for mac authentication bypass on cisco 1900 router

c1921> enable
c1921# configure terminal
c1921(conf)#interface gigabitethernet slot / port
c1921(conf-if)# authentication port-control auto
c1921(conf-if)# mab
c1921(conf-if)# end

> You can verify using the below command

c1921#show authentication sessions 
Interface MAC Address Method Domain Status Session ID
Gi0/1 0201.0201.0201 mab DATA Authz Success 0303030300000004002500A8
c1921#show authentication sessions interface Gi0/1
 Interface: GigabitEthernet0/1
 MAC Address: 0201.0201.0201
 IP Address: Unknown
 User-Name: 02-01-02-01-02-01
 Status: Authz Success

Domain: DATA
 Oper host mode: single-host
 Oper control dir: both
 Authorized By: Authentication Server
 Vlan Group: N/A
 AAA Policies: 
 Session timeout: N/A
 Idle timeout: N/A
 Common Session ID: 0303030300000004002500A8
 Acct Session ID: 0x00000007
 Handle: 0x3D000005
Runnable methods list:
 Method State
 mab Authc Success

For more details refer the below link:

http://www.cisco.com/c/en/us/td/docs/routers/access/1900/software/configuration/guide/Software_Configuration/conf.pdf

Thanks & Regards

Sandeep

[Chin]

Hi Sandeep, 

Thanks for your document. 

But this is the mac authentication bypass. How about if I want to control user authentication by manual configure mac address in authentication to control the wifi access?

Best regards

TPPSupport

[Scott Fella · Accepted solution]

If your trying to configure mac filtering on the access point in the 1941w and the AP is autonomous, you can follow this guide:

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/116582-configure-ap-00.html

Scott

[Chin]

Thanks guys, 

I able to use the mac-list to control the mac address filtering. 

[Sandeep Sharma · Accepted solution]

Hi,

For MAC filtering In case of autonomous AP creating access-list, use the below command

Test-AP# configure terminal

Test-AP(conf)# access-list 700 deny <mac-address you want filter/deny>

 For light weight follow the below process:

http://www.cisco.com/c/en/us/td/docs/wireless/controller/4-2/configuration/guide/ccfig42/c42lwap.html#wp1115915

Thanks & Regards

Sandeep