Is it possible to exclude selected clients from WLC WEBAUTH?

yprasannas · ‎03-02-2012

We use NOMADIX for only banner implementaion. So client gets authenticated by WLC and has to click OK on the banner. Could have used WLC for this but sometimes we need to exclude few devices that are not capable of clicking OK on banner. Would be helpful if WLC has the exclude feature.

Ven Taylor · ‎03-02-2012

You can deny access based on mac address.

On WLC, go to Security tab, choose Disabled Clients, and click the "New" button.

At my old company, we would use this when we got log entries on our firewall for people surfing porn on their iPhones.

They would then call the helpdesk and ask why they can't get on the wireless and we could refer them to the security team.

Ven

Ven Taylor

yprasannas · ‎03-02-2012

I do not want to deny access...some devices need extra privelege of not clicking banner after WLC authentication. In NONADIX we can give list of devices and they are home free. Example...environmental monitors, etc.

nikhilcherian · ‎03-02-2012

Put mac-filtering and add your clients and go for web-policy On MAC Filter failure, this is supported in 7.0.116.0. I am not sure, which release this feature was introduced

Thanks

NikhiL

yprasannas · ‎03-02-2012

There are unknown clients joining the SSID, clicking the banner so I do not know their MAC address.

I only know the MAC address for the devices that do not want to use WEBAUTH.

nikhilcherian · ‎03-02-2012

You enable mac-filtering and add those client -mac which you dont have to use web-auth, so that when they join they get authenticated. Those clients whose mac wasnt added, will fail authentication and go for web-auth

Thanks

NikhiL

nikhilcherian · ‎03-03-2012

Did this resolve your issue

yprasannas · ‎03-05-2012

I will implement this in couple of days and will let you know.

Thanks for the tip!

yprasannas · ‎03-12-2012

The option "On MAC Filter failure" show the banner worked to not show banner....but found an issue...for the users that need banner, they are in a loop. When they click ok the banner comes back.

The issue goes away if I disable MAC Filter Failure....all users can click OK and get redirected to the right destination.

nikhilcherian · ‎03-12-2012

or the users that need banner, they are in a loop

what does the above the line means

When they click ok the banner comes back.

please elaborate this also