Solved: Some question for the HREAP local authentication with mac filtering

billytsang · ‎01-31-2012

Dear all,

I am using the WLC with version 7.0.116.0 and found that there are foot note mention that "

MAC Filtering is not supported with HREAP Local authentication" in WLAN configuration page,

Does it mean that MAC filtering does not support in HREAP local authentication?

Thanks.

Scott Fella · ‎01-31-2012

That is correct... when the h-reap ap is in local authentication or stand alone mode, the mac filteing is bypassed, since the wlc has the mac filter list.

-Scott
*** Please rate helpful posts ***

View solution in original post

Scott Fella · ‎01-31-2012

That is correct... when the h-reap ap is in local authentication or stand alone mode, the mac filteing is bypassed, since the wlc has the mac filter list.

-Scott
*** Please rate helpful posts ***

billytsang · ‎01-31-2012

Thanks Scott,

Is there any documents to record the issue, thanks?

Scott Fella · ‎01-31-2012

The documents on h-reap just state the same thing. The reason Mac filter works is because traffic flows to the wlc. So when you loose the connection to the wlc and the h-reap ap goes into standalone, there is no way to perform Mac filtering because the ap does not know of the Mac address. Makes sense?

Thanks,

Scott Fella

Sent from my iPhone

-Scott
*** Please rate helpful posts ***

Josh Morris · ‎10-24-2012

Can you confirm that you mean when the AP is in "AP mode: local" that MAC filtering will not work? Or does the "AP mode" need to be H-REAP for mac filtering to not work?

Saravanan Lakshmanan · ‎10-28-2012

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080b3690b.shtml

FlexConnect Feature Matrix

Legacy and New Features in 7.0.116.0 and Above

Security - Client

Depending on the modes and states, security support on the FlexConnect varies. This table summarizes the security features supported.

	WAN Up (Central switching)	WAN Up (Local Switching)	WAN Down (Standalone)
Open/Static WEP	Yes	Yes	Yes
WPA-PSK	Yes	Yes	Yes
802.1x (WPA/WPA2)	Yes	Yes	Yes
MAC Authentication	Yes	Yes	No
CCKM Fast Roaming	Yes	Yes	Yes, for connected clients. No, for new clients.