mac filtering and wpa2 enterprise with WLC and radius

[alessandro.dona]

Hi Guys,

is it possible to implemente mac filtering and wpa2 enterprise in order only user with a specific mac and and username and passowrd can authenticate?

If  it is possible how can it work and how can i implement it with a WLC and a cisco radius server?

Thx

Alessandro

[rsumpter]

If you are using PEAP authentication through ACS you can enter the MAC address under the "Per User Defined Network Access Restrictions" under the user setup page in ACS.  Check "Define CLI/DNIS-based access restrictions" and permit port=*, CLI = "MAC address", DNIS = *.

[Pavel K]

Works!