Mac-address binding and SSID grouping

[King_1988]

Hi,

I have two queries regarding WLC 3504 :

1. For MAC binding, we can only give entry of MAC-address manually  in WLC-3504, which is very much time consuming and error-prone. Is there any option of uploading mac-address along with user in any excel/csv format? 

2. Can we  assign any specific SSID profile to a specific AP so that the AP will not broadcast any other SSID in cisco WLC 3504?

[Leo Laohoo]

---

@King_1988 wrote:
Can we  assign any specific SSID profile to a specific AP so that the AP will not broadcast any other SSID in cisco WLC 3504?

---

Depends on complexity, this is what Dot1X is all about.  

Cisco ISE is capable of doing this and other vendors/competitors (like Aruba's ClearPass).

[King_1988]

Is the below requirement possible? 

1. For MAC binding, we can only give entry of MAC-address manually  in WLC-3504, which is very much time consuming and error-prone. Is there any option of uploading mac-address along with user in any excel/csv format? 

[Leo Laohoo]

MAC bind to what, IP address, VLANs? 

Share the scenario because "MAC binding" can be a very broad term depending on how it is deployed & employed.

[King_1988]

MAC bind to IP address

[Leo Laohoo]

---

@King_1988 wrote:
MAC bind to IP address

---

Any DHCP server can do that.

[Rich R]

> 2. Can we  assign any specific SSID profile to a specific AP so that the AP will not broadcast any other SSID in cisco WLC 3504?
That's exactly what AP groups are for!
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/configuring_ap_groups.html

MAC-IP is a DHCP function. 
It sounds like you are trying to configure a static ARP (which is what MAC to IP is) on the WLC - why?
Are you referring to https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/global_traffic_forwarding_configurations.html#ID2851 ?  That just turns binding on or off though.
Provide the exact page/menu/option you are referring to and/or a screenshot.
Generally speaking you can provide any config via CLI which you could automate with the right scripting.

Or maybe you are referring to local MAC filters? (which are a really bad idea because any client can change their MAC address):
The CLI for that is at https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/wlan_security.html#local-mac-filters which you could easily script.