10-02-2010 03:24 AM - edited 07-03-2021 07:14 PM
Hi All,
is it possible to Block or Disable a complete Vendor MAC - like Apple 7c:6d:62:x:x:x - with using Wildcards on a Wireless LAN Controller? Background is, that the Customers IT-Department is only allowing the use of one Vendor, so every MAC Address of another Vendor is rogue. If Blocking is not possible on WLC, can i do this on ACS?
Thx in adv, Michael
Solved! Go to Solution.
10-03-2010 07:16 PM
Hi,
Unfortunately there is no option of using wildcard mask on WLC for mac filtering. We need to configure complete individual MAC addresses which needs to be allowed (rest of it would be blocked).
More information : http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008084f13b.shtml
Regards,
Madhuri
10-03-2010 09:20 PM
This can be done using the Autonomous APs but not with LWAPP and WLC.. even on the ACS we provide the MAC address.. we dont use the mask.. however the IOS APs we specify the mask..
Regards
Surendra
10-06-2010 08:01 AM
Hi
if you create a NAR entry on ACS, you can use callerID information (DNIS) which will have the mac address.
then on ACS, it will support wildcards for all or part of each of the attributes:
so, it should be posible to be done on WLC, if you move the validation into ACS itself.
Regards
10-03-2010 07:16 PM
Hi,
Unfortunately there is no option of using wildcard mask on WLC for mac filtering. We need to configure complete individual MAC addresses which needs to be allowed (rest of it would be blocked).
More information : http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008084f13b.shtml
Regards,
Madhuri
10-03-2010 09:20 PM
This can be done using the Autonomous APs but not with LWAPP and WLC.. even on the ACS we provide the MAC address.. we dont use the mask.. however the IOS APs we specify the mask..
Regards
Surendra
10-06-2010 08:01 AM
Hi
if you create a NAR entry on ACS, you can use callerID information (DNIS) which will have the mac address.
then on ACS, it will support wildcards for all or part of each of the attributes:
so, it should be posible to be done on WLC, if you move the validation into ACS itself.
Regards
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide