Cisco Autonomus 1131AG With Authentication PSK + Mac Filtering

[Alejandro Alcantara]

Hello Experts.

I'm working with two 1131AG Aironet APs Autonomus, right now I have just one SSID with WPA2-PSK authentication method and everything is working fine, but my client asked for add mac filtering authentication,

I'm not sure if this AP can do it by itself and I'm not sure how to configure it.

I read this post and I saw it is using an authentication server.

Anyone know something about it?

Thanks in advance

[Flavio Miranda]

Hi,

Have you tried this?

access-list 701 deny  0000.0000.0000

Config terminal
dot11 association mac-list 701
end

-If I helped you somehow, please, rate it as useful.-

[Alejandro Alcantara]

Never... :(

[Alejandro Alcantara]

Hi Flavio.

I look for you comment so.. if I get it right I can do it in this way...

access-list 701 permit 0016.6f38.5a75   0000.0000.0000
access-list 701 permit 0016.6f47.2f5a   0000.0000.0000
access-list 701 permit 0016.6f72.8730   0000.0000.0000
access-list 701 permit 0016.6f6b.c156   0000.0000.0000

access-list 701 deny   0000.0000.0000   ffff.ffff.ffff

Config terminal
dot11 association mac-list 701
end

Is that correct?

[Flavio Miranda]

Yeah, this should work!

-If I helped you somehow, please, rate it as useful.-

[Alejandro Alcantara]

Thanks Flavio.
It works, but right now I have another question.
The ACL is applied to the Radio interface, this solution can be apply for SSID?
I was wondering... If I have subinterfaces per SSID I can apply it in each one?

[Flavio Miranda · Accepted solution]

Unfortunately is not possible:

"

Note The list is global. A MAC address defined in the list will be authorized to join any SSID where MAC address authentication is enabled. If you want to use different lists of MAC addresses for different SSIDs on the AP, you must use an external RADIUS server.

 "

-If I helped you somehow, please, rate it as useful.-

[Alejandro Alcantara]

Thanks Flavio :)