WLC 9800 MAC filter multiple wlan

[Leo TI]

Hi friends, I'm configuring a WLC 9800 17.9.4.a. MAC address filtering works, but it doesn't respect the WLAN space.
For example, I want MAC01 to connect to WLAN profile Test02 but not to WLAN profile Test3, and I want MAC02 to connect to WLAN profile Test3 but not to WLAN profile Test02.
But I see that both devices can connect to any WLAN.

[balaji.bandi]

Maybe I am not apparent here. In your screenshot, both are different MAC addresses, and I can see other profiles.

Check some reference guides

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213922-configure-mac-authentication-ssid-on-cis.html

[Leo TI]

Hello, they are different MAC addresses that I want to connect to different WLANs. The problem is that since they are in the independent list of the WLAN I choose, they connect.

[srimal99]

Can you see auth log ISE or authentication devices , If you are using ISE, have you defined mac group in Endpoint ? may missed out on ISE config.

[Leo TI]

hello

I'm not using ISE, everything is local.

[Scott Fella · Accepted solution]

Take a look at this thread.  Toward the middle, you can see an example of a forum member @JPavonM provided.

https://community.cisco.com/t5/wireless/c9800-mac-filtering/td-p/4494040

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213922-configure-mac-authentication-ssid-on-cis.html#toc-hId-228841407

[Leo TI · Accepted solution]

Thanks for the collaboration, Scott Fella.
These are the settings I added.

[Scott Fella]

If you do have a lab, you should look at Cisco ISE, you can spin that up free for 90 day's at a time and it gives you so much and also one place to look for macs.  I use to do local stuff on my home lab and now just run ISE and reset it before the eval license expires.