Cisco WLC only allow PC/MAC OS connect?

[cherrykit]

Dear All,

Is there any way to config the WLC only allow PC or MAC OS to connect to WLC? So many IPhone/Android/IPad....etc are using out network and we would like to disconnect all mobile device in one go, other than MAC filtering, any idea? Thanks!

Frankie

[Stephen Rodriguez]

You would need something that can 'fingerprint' a device to know what it is, and allow/disallow on the device type.

take a look at the Cisco ISE offering.

http://www.cisco.com/en/US/customer/products/ps11640/index.html

Steve

[cherrykit]

Thanks for your reply

Is it only this way to do? Any MAC address pattern that I can follow and set it into the MAC filtering?

[Stephen Rodriguez]

No.  The OUI portion of the MAC address will just identify the manufacturor, not the device.

For example, just looking at the OUI you can't differentiate a Mac Book from an iPad, as both OUI would just show Apple Inc.

Steve

[George Stefanick]

As Steve points out ISE is the way to go.

ISE uses "probes"

Radius

DHCP Finger Print

HTTP

From these probes it can ID what the device is and then depending on your needs shuffle the devices around.

[Ven Taylor]

What kind of authentication are you using?  If you're using web auth or open auth, you may be stuck.

You could use something clunky like machine certificates.  This way, you control who gets on the network.

However, it becomes a nightmare for the helpdesk when people have to change their passwords.  The certs stop working on Mac.  My old company had it like this and they hated it, but it kept mobile devices off.

If you really want to control your mobile device access, you're going to have to spend some cash.

Just out of curiosity, why do you want to keep mobile devices off your wireless? 

Ven