Has someone tried an Association Access List on an ap or Bridge?
im really getting crazy with this feature 😃
my config:
..
dot11 association mac-list 701
....
access-list 701 deny 0002.a56f.a201 0000.0000.0000
access-list 701 permit 0000.0000.0000 ffff.ffff.ffff
i have hits with may clients BUT he still can connect!
in the documentation (http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag/123-02.JA/1100/h_ap_howto_3.htm#mac)
for mac filter there is written:
# Use the Mask entry field to indicate how many bits, from left to right, the filter checks against the MAC address. For example, to require an exact match with the MAC address (to check all bits) enter FFFF.FFFF.FFFF. To check only the first 4 bytes, enter FFFF.FFFF.0000.
# Select Forward or Block from the Action menu.
If i try to make the filter
access-list 701 deny 0002.a56f.a201 ffff.ffff.ffff
access-list 701 permit 0000.0000.0000 ffff.ffff.ffff
i get an error over the webpage and when i make in in the cli the acl looks like that:
access-list 701 deny 0000.0000.0000 ffff.ffff.ffff
access-list 701 permit 0000.0000.0000 ffff.ffff.ffff
so what do i make wrong?
bernhard
