Mac filtering with encryption

[abu.sayeed1]

Hello All,

We have two autonomous AIR-SAP2602I-E-K9 APs. Is it possible to use MAC filtering with WEP or WPA? So devices trying to connect to the APs must use the WEP or WPA key and must be in the allowed MAC list.

Many thanks for your replies.

Abu

[George Stefanick]

Yes you can do an acl on the ap for Mac filter and the wep/psk. 

[abu.sayeed1]

Hi George,

Thanks for your reply. Could you please point to any guide?

Regards

Abu

[George Stefanick · Accepted solution]

Using MAC Address ACLs to Block or Allow Client Association to the Access Point

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/12-3_2_JA/configuration/guide/i1232sc/s32filt.html#wp1039154

then just do your wpa  config

[abu.sayeed1]

Thank you very much George.

I was doing it under MAC address authentication and going wrong there and then I read 

"A. The Cisco AP does not support local MAC authentication and Wi-Fi Protected Access Pre-share Key (WPA-PSK) in the same Service Set Identifier (SSID). When you enable local MAC authentication with WPA-PSK, WPA-PSK does not work. This problem occurs because local MAC authentication removes the WPA-PSK ASCII password line from the configuration." here http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/68583-FAQ-Wireless-Security.html

I don't understand this bit from the link you gave, sorry for being thick:

"Step 9 Select Forward All or Block All from the Default Action menu. The filter default action must be the opposite of the action for at least one of the addresses in the filter. For example, if you enter several addresses and you select Block as the action for all of them, you must choose Forward All as the filter default action."

[George Stefanick]

Excellent .. Thanks for supporting the rating system .. 

[abu.sayeed1]

Thanks a lot George, it worked.