Cisco wlc mac filtering issue

[remus.delavega]

Hi Everyone

We have setup a mac filtering which is using windows server for mac authentication(PSK + Mac authentication). The issue is that when the users tried to disconnect the device from the wifi for a long time(like 1-2 weeks) then tried to connect again, the user will not be able to connect to it even forgetting password.

we also tried to remove the user on excluded clients but still won't pass through. 

The work around is to re-add the mac address on the windows server, forgot the wifi connection and then reconnect again.

If you have encountered similar issue or where to start investigating kindly reply. Thanks all

[patoberli]

I would stop with MAC filtering, simply because more and more clients will start to use random mac addresses in the future.

Now to your problem, what can you see in the radius log files when the client tries to associate? And on the WLC, what does a 'debug client themacaddress' output when the client tries to join?