cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3562
Views
15
Helpful
29
Replies
Highlighted
Beginner

MAC Filter Fields On WLC

When adding a new MAC filter on WLC .

there are some fields i dont fully understand.

1. Profile Name

2. Interface Name 

3. IP address

if i understand correctly to add MAC filtering to specific WLAN , i need to enable thatin the WLANs security tab.

so where do Profile and Interface come in?

and is the IP address a must?

29 REPLIES 29
Highlighted
Hall of Fame Master

I just typically set the interface and leave the rest blank.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
Highlighted

does "interface" mean that the MAC filter will only allow access if my MAC is listed & im trying to access the specific interface (VLAN)?

Highlighted

Yes

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
Highlighted

i tested a WLAN with MAC filter enabled.

i added my laptops MAC to the MAC filter list

no matter which Profile Name or Interface i choose, i am able to connect.

so i am still not clear on what the "Profile name" or  "interface" fields do.

Highlighted

Interesting because when I have tested it, it only allows me to connect on the interface I set it to.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
Highlighted
Cisco Employee

what wlc code?

get, debug client output?

Highlighted

Hello Jacob,

Was it solved? Anyone knows how to solve that?

Highlighted

What code are you running and how do you have it setup.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
Highlighted

Hi Scott,

It's a 2504 WLC running version 7.0.220.0 with a single (so far) AP 1041 running IOS 12.4(23c)JA3.

I inserted a list of allowed MAC Address on Security > AAA section

On the WLANs, enabled "MAC Filtering" option

As Jacob stated on the first message, even selecting one specific interface or WLAN, clients (with that specific MAC) are able to join any WLAN

I have three WLANs

- Broadcast SSID + WPA2 PSK

- Don't broadcast SSID + WPA2 PSK

- Broadcast SSID + web authentication (guest wlan)

Also, tried to search on the Bug Toolkit but I can't find the WLC 2500 series.

Regards

Highlighted

I can test it out again... I have a 2504 running 7.4

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***
Highlighted

Thank you for testing.

The only solution I see is to upgrade the controller.

Do you know how is this proccess? I'm sorry, but I'm used just to change IOS versions, and never the controller.

Victor.

Highlighted

The release notes for the code you want to upgrade to has a section on upgrading to new release.  Its pretty straight forward, but you might have to do a double upgrade, one for the WLC code and the other is the FUS image.  This is all noted in the relase notes.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***
Highlighted

Well the mac filter worked for me... I had to enable mac filter on all SSID's and the profile and interface that I applied my mac filter to, only worked for that SSID and interface.  So the issue with this is you can allow only certain mac address to a WLAN SSID, but if you don't have mac filter checked on all your SSID's, then that device can access the other SSID's that do not have the mac filter enabled.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***
Highlighted

Not sure if I did set MAC Filtering on all WLANs.

Will try to test this again and let you know!