Cisco WLC 9800 filter mac Authorization not working

[Leo TI]

hi

I'm setting up a wireless network with mac filtering, but I get this error.

Dec 4 21:08:42.786: %SESSION_MGR-5-FAIL: Chassis 1 R0/0: wncd: Authorization failed or unapplied for client (b894.e7a0.8677) on Interface capwap_9000000d AuditSessionID 320A16AC000081229380F15D. Failure reason: Authc fail. Authc failure reason: AAA Server Down.

[Flavio Miranda]

@Leo TI 

Seems like the WLC is not communicating with your Radius server "AAA Server Down."

[Leo TI]

I'm not using radius server it's an open network that has mac filtering

[Flavio Miranda]

But the WLC is trying to reach the radius. Double check the configuration then.

[Haydn Andrews]

One thing I can not see is do you have aaa-override enabled on the SSID?

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213922-configure-mac-authentication-ssid-on-cis.html#toc-hId-228841407 

[Leo TI]

I enabled it but still have the same problem

[Flavio Miranda]

I saw you have authorization list configured but you did not select here.

[Leo TI]

But there I see the lists of dot1x groups, which in the case of an open network with mac filtering would not be necessary.

[Rich R · Accepted solution]

You've made the common mistake of entering your MAC address incorrectly!
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213922-configure-mac-authentication-ssid-on-cis.html#toc-hId-228841407

The MAC addresses must be entered all in lower case and with NO punctuation.
No dots (.), no dashes (-), no colons (:).
Otherwise it will never match.

[Leo TI]

Thank you very much, that was it

[Rich R]

No problem @Leo TI 

[MHM Cisco World]

Thanks 

[MHM Cisco World]

MHM