MAC Filtering questions

[patrickrad]

I have been using a 1200 WAP for about a year now. I am in an environment where users bring every type of adapters imaginable. I have been using MAC filtering only to ensure that users sign our wireless agreement, not for any real security issues. I'm using IOS 12.2(11)JA Either way I have the following questions:

1) How many MAC address can the table hold? It seems I've hit a limit. When I add new ones, others seem to get delteted. And the web browser flashes a quick message that I can never read entireley or pause. Something about "configuration buffer full" Is there some way to have an external file of allowed MAC address?

2) I will be adding 3 more WAPs shortly, will I have to add the MAC address on all of them? Maybe if I set them up as repeaters I won't have to?

[wong34539]

Using the CLI, you can configure up to 2,048 MAC addresses for filtering. Using the web-browser interface, however, you can configure only up to 43 MAC addresses for filtering.

http://www.cisco.com/univercd/cc/td/doc/product/wireless/airo1100/accsspts/i12215ja/i12215sc/s15filt.htm#wp1034897

[paddyxdoyle]

If you use the three WAPs in repeater mode you won't have to configure MACs on all of them, just the root AP. This will impact on performace though as all packets will be passed through your repeaters to the root, espicially on your clients at the far end of the chain.

If your budget permits you can use the NAR feature ACS for centralised MAC address authentication plus you would get additional benefits of support for eap-tls etc..

Rgds

Paddy

[dmaxion]

What exactly is the NAR feature and how do I get it?