Blocking a MAC address from Authentication to AIR-AP1230 12.3(8) JA

[amowat]

Anyone know the CLI commands for blocking a single MAC address from Associating to an AIR-AP1230 running 12.3(8)?

[a-vazquez]

You can have MAC address authentication

http://www.cisco.com/en/US/products/hw/wireless/ps458/products_configuration_guide_chapter09186a0080234dde.html#wp1036092

[clay.white]

This link may help as well:

http://www.cisco.com/en/US/products/hw/wireless/ps430/products_configuration_guide_chapter09186a0080184aa0.html#91655

Change the Action to Block, make the Default Action Forward All, and make the mask 0.0.0.0. Apply this to the dotllradio interface (or sub-interface), filtering inbound packets. This should block the specified MAC address only.

[amowat]

I was looking for the CLI commands.

[clay.white]

Commands are as follows to block MAC address abcd.ef01.2345:

access-list 750 deny abcd.ef01.2345 0000.0000.0000

access-list 750 permit 0000.0000.0000 ffff.ffff.ffff

Then on the dot11radio interface or sub-interface, apply the access list:

bridge-group 255 input-address-list 750

The bridge-group number is arbitrary here and corresponds to the interfaces you've created.