Solved: Re: Cisco AP 9120 EWC

viv42 · ‎06-03-2023

I am working on Cisco AP 9120 EWC version 17.6.5 controller.

One of my clients wants to use MAC filter-based SSID.

As per the Cisco document, EWC can only connect 2000 Clients. Please let me know, what will be the limitation on adding MAC addresses for MAC filter-based SSID.

Flavio Miranda · ‎06-03-2023

Hi

Do you mean limitation in how many mac address? The mac address is assigned per WLAN and it will sopport as many clients as you have on that WLAN. Of course, limited to 2000 which is the maximum devices you can have.

View solution in original post

Flavio Miranda · ‎06-03-2023

Hi

Do you mean limitation in how many mac address? The mac address is assigned per WLAN and it will sopport as many clients as you have on that WLAN. Of course, limited to 2000 which is the maximum devices you can have.

Leo Laohoo · ‎06-03-2023

MAC Address Filtering is now irrelevant since the introduction of Random MAC Addresses.

Rich R · ‎06-04-2023

Explain to the client why MAC address filtering is pointless in 2023 as Leo pointed out.
If they want to control access then use a 802.1x based solution which authenticates each client.

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs

viv42 · ‎06-04-2023

Thank you all for the reply.

My query is resolved now.