WLC9800 mac filter by two ssid

[Wei Ting Lin]

hi all

I have WLC 9800 and create two SSID,

how can I config MAC filter by difference SSID,

the MAC filter config form WLC9800, no ISE.

A SSID allow 1,2,3,4 MAC

B SSID allow 11,12,13,14 MAC

@ WLC9800

[balaji.bandi]

how can I config MAC filter by difference SSID,  - you need to explain more ? you want to use MAB and using MAC Filtering here ?

check some configuration guide may help you.

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213922-configure-mac-authentication-ssid-on-cis.html

[Wei Ting Lin]

I want to use WLC9800 local MAC filtering,
Go to set the filter Mac from two SSID,
Or do this need must be ISE? Can't use only 9800 local Mac Filter features?

[balaji.bandi]

Since you have 2 different MAC address each SSID : follow the guide i have suggested above.

A SSID allow 1,2,3,4 MAC

B SSID allow 11,12,13,14 MAC

[JPavonM]

You cannot configure the same MAC to get access to different SSIDs. Please check this:

https://community.cisco.com/t5/wireless/mac-filtering-on-wlc/td-p/4742647

[Daniel Ordóñez Flores · Accepted solution]

Hi @Wei Ting Lin 

I'm not sure if this can help you, but you need to do this:

1. Create you WLAN with MAC Filtering.
2. Create an authorization list: Type = Network ||  Group type= Local (Configuration --> AAAA--> AAA Method List--> Authorization)
3. Create an Atribute list: Attribute Type = SSID || Attribute Value= SSID (This is your SSID that you already create in step one) (Configuration --> AAAA--> AAA Advance--> Attribute List)
4. Add de mac address of your device with this format: xxxxxxxxxxxx in the field "Attribute List" select you attribute liste create in step three. And Select you WLAN Profile
5. Last step.. go back to your SSID in Configuration --> WLANs ---> Security Tab and select the Authorization list that you created on step two.

[Wei Ting Lin]

I follow the Daniel step, and enable AAA overwrite from policy.

the problem is solve.