Web Auth with Mac Filtering

[Nicholas Copeland]

I am trying to setup a scenario where a user logs in via Web Auth and witha  successfull connection the Mac Address is remembered for 7 days. That way if the user connects again during the course of 7 days they aren't required to authenticate via web auth again they just get access. After 7 days they will need to login again through the web auth. Similar scenario to what you see at a Hotel wireless network. Anyone know how I would go about setting up the dyanmic mac filtering and set the timer for 7 days? With that said I want it to be for a single SSID.

[Scott Fella · Accepted solution]

Not possible.... the reason being is the max timer for the session timeout on the guest WLAN.  Also when the user sits idle, the idle timeout start counting down.  So having the WLC remember the mac address and allow x number of days before having to log back on, is not possible.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[Nicholas Copeland]

That's what I was afraid of. But kind of what I thought based off some of the research I have done.

[Scott Fella]

Yeah it been asked many times so maybe one day it will be possible.

Sent from Cisco Technical Support iPhone App

[Stephen Rodriguez]

well, it's not possible with just the WLC.

You can do it, but you need to have a way to pull the MAC address from the webauth page, and insert that into a LDAP db, which you control the age out process in.

Then on a subsequent visits they get mac-authed instead of having to re-accept the page.

in the webauth config you would check the On MAC filter failure box.

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

[Nicholas Copeland]

Yes so that is kind of what I will do with ISE. I just won't be able to age out the device from the db automatically. It will have to be a manual process from my understanding with the latest version of ISE.