cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4634
Views
15
Helpful
29
Replies

MAC Filter Fields On WLC

Jacob Berger
Level 2
Level 2

When adding a new MAC filter on WLC .

there are some fields i dont fully understand.

1. Profile Name

2. Interface Name 

3. IP address

if i understand correctly to add MAC filtering to specific WLAN , i need to enable thatin the WLANs security tab.

so where do Profile and Interface come in?

and is the IP address a must?

29 Replies 29

Scott Fella
Hall of Fame
Hall of Fame

I just typically set the interface and leave the rest blank.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

does "interface" mean that the MAC filter will only allow access if my MAC is listed & im trying to access the specific interface (VLAN)?

Yes

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

i tested a WLAN with MAC filter enabled.

i added my laptops MAC to the MAC filter list

no matter which Profile Name or Interface i choose, i am able to connect.

so i am still not clear on what the "Profile name" or  "interface" fields do.

Interesting because when I have tested it, it only allows me to connect on the interface I set it to.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

Saravanan Lakshmanan
Cisco Employee
Cisco Employee

what wlc code?

get, debug client output?

Victor Circelli
Level 1
Level 1

Hello Jacob,

Was it solved? Anyone knows how to solve that?

What code are you running and how do you have it setup.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***

Hi Scott,

It's a 2504 WLC running version 7.0.220.0 with a single (so far) AP 1041 running IOS 12.4(23c)JA3.

I inserted a list of allowed MAC Address on Security > AAA section

On the WLANs, enabled "MAC Filtering" option

As Jacob stated on the first message, even selecting one specific interface or WLAN, clients (with that specific MAC) are able to join any WLAN

I have three WLANs

- Broadcast SSID + WPA2 PSK

- Don't broadcast SSID + WPA2 PSK

- Broadcast SSID + web authentication (guest wlan)

Also, tried to search on the Bug Toolkit but I can't find the WLC 2500 series.

Regards

I can test it out again... I have a 2504 running 7.4

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***

Thank you for testing.

The only solution I see is to upgrade the controller.

Do you know how is this proccess? I'm sorry, but I'm used just to change IOS versions, and never the controller.

Victor.

The release notes for the code you want to upgrade to has a section on upgrading to new release.  Its pretty straight forward, but you might have to do a double upgrade, one for the WLC code and the other is the FUS image.  This is all noted in the relase notes.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***

Well the mac filter worked for me... I had to enable mac filter on all SSID's and the profile and interface that I applied my mac filter to, only worked for that SSID and interface.  So the issue with this is you can allow only certain mac address to a WLAN SSID, but if you don't have mac filter checked on all your SSID's, then that device can access the other SSID's that do not have the mac filter enabled.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***

Not sure if I did set MAC Filtering on all WLANs.

Will try to test this again and let you know!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: