Enabling Mac Filtering; Creating A Local Mac Filter; Configuring A Timeout For Disabled Clients; Assigning Wlans To Interfaces - Cisco 2100 Series Configuration Manual

Chapter 6 Configuring WLANsWireless Device Access

Enabling MAC Filtering

Use these commands to enable MAC filtering on a WLAN:
•
•
When you enable MAC filtering, only the MAC addresses that you add to the WLAN are allowed to join
the WLAN. MAC addresses that have not been added are not allowed to join the WLAN.

Creating a Local MAC Filter

Controllers have built-in MAC filtering capability, similar to that provided by a RADIUS authorization
server.
Use these commands to add MAC addresses to a WLAN MAC filter:
•
•
•

Configuring a Timeout for Disabled Clients

You can configure a timeout for disabled clients. Clients who fail to authenticate three times when
attempting to associate are automatically disabled from further association attempts. After the timeout
period expires, the client is allowed to retry authentication until it associates or fails authentication and
is excluded again. Use these commands to configure a timeout for disabled clients:
•
•

Assigning WLANs to Interfaces

Use these commands to assign a WLAN to an interface:
•
•
OL-17037-01
Enter config wlan mac-filtering enable wlan_id to enable MAC filtering.
Enter show wlan to verify that you have MAC filtering enabled for the WLAN.
Enter config macfilter add mac_addr wlan_id [interface_name] [description] [IP_addr] to create
a MAC filter entry on the controller, where the following parameters are optional:
interface_name—The name of the interface.
–
description—A brief description of the interface in double quotes (for example, "Interface1").
–
IP_addr—The IP address of the local MAC filter database.
–
Enter config macfilter ip-address mac_addr IP_addr to assign an IP address to an existing MAC
filter entry, if one was not assigned in the config macfilter add command.
Enter show macfilter to verify that MAC addresses are assigned to the WLAN.
Enter config wlan exclusionlist wlan_id timeout to configure the timeout for disabled clients. Enter
a timeout from 1 to 65535 seconds, or enter 0 to permanently disable the client.
Use the show wlan command to verify the current timeout.
Enter this command to assign a WLAN to an interface:
config wlan interface {wlan_id | foreignAp} interface_id
Use the interface_id option to assign the WLAN to a specific interface.
–
Use the foreignAp option to use a third-party access point.
–
Enter show wlan summary to verify the interface assignment status.
Cisco Wireless LAN Controller Configuration Guide
Configuring WLANs
6-15