Using The Cli To Debug Ccx Client Roaming Issues; Configuring Ip-Mac Address Binding - Cisco 2100 Series Configuration Manual

Configuring IP-MAC Address Binding

Using the CLI to Debug CCX Client Roaming Issues

If you experience any problems with CCX Layer 2 client roaming, enter this command:
debug l2roam [detail | error | packet | all] {enable | disable}
Configuring IP-MAC Address Binding
In controller software release 5.2, the controller enforces strict IP address-to-MAC address binding in
client packets. The controller checks the IP address and MAC address in a packet, compares them to the
addresses that are registered with the controller, and forwards the packet only if they both match. In
previous releases, the controller checks only the MAC address of the client and ignores the IP address.
If the IP address or MAC address of the packet has been spoofed, the check does not pass, and the
Note
controller discards the packet. Spoofed packets can pass through the controller only if both the IP and
MAC addresses are spoofed together and changed to that of another valid client on the same controller.
Using the controller CLI, follow these steps to configure IP-MAC address binding.
To enable or disable IP-MAC address binding, enter this command:
Step 1
config network ip-mac-binding {enable | disable}
The default value is enabled.
Note
To save your changes, enter this command:
Step 2
save config
Cisco Wireless LAN Controller Configuration Guide
4-44
This command provides the following information:
The time when the report was received
–
The MAC address of the access point to which the client is currently associated
–
The MAC address of the access point to which the client was previously associated
–
The channel of the access point to which the client was previously associated
–
The SSID of the access point to which the client was previously associated
–
The time when the client disassociated from the previous access point
–
The reason for the client roam
–
You might want to disable this binding check if you have a routed network behind a workgroup
bridge (WGB).
Chapter 4 Configuring Controller SettingsWireless Device Access
OL-17037-01