Dynamic mac address authentication

[manvik]

how's everyone tackling the dynamic MAC address challenge in new android & Mac devices. Our SSID is MAC filtered, MAC address is added to WLC and those are permitted to connect.

Issue is client device MAC address keeps on changing as it has dynamic mac enabled.

[ammahend · Accepted solution]

I understand you don’t have ise, but this might give you a good outlook on your problem

https://community.cisco.com/t5/security-documents/random-mac-address-how-to-deal-with-it-using-ise/ta-p/4049321

there is no silver bullet to this issue, if it’s managed device then you can use MDM to turn off max randomization, otherwise move away from MAB to 802.1X, MAB it’s highly insecure anyways. 

hope this helps 

[manvik]

@ammahend you are right, we are not using ISE or MDM. I think there's no option now we can't use WLC MAC filtering until client turns of dynamic mac address.

[Flavio Miranda]

Hi

 This feature only make netadmin lifes harder. To me, the best option is disable it. I see no gain and a lot of problem, inclusive in ISE.