Some question for the HREAP local authentication with mac filtering

Answered Question
Jan 31st, 2012
User Badges:

Dear all,


I am using the WLC with version 7.0.116.0 and found that there are foot note mention that "

MAC Filtering is not supported with HREAP Local authentication" in WLAN configuration page,

Does it mean that MAC filtering does not support in HREAP local authentication?



Thanks.

New Picture.bmp

Correct Answer by Scott Fella about 5 years 3 months ago

That is correct... when the h-reap ap is in local authentication or stand alone mode, the mac filteing is bypassed, since the wlc has the mac filter list.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Scott Fella Tue, 01/31/2012 - 05:00
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 Wireless

That is correct... when the h-reap ap is in local authentication or stand alone mode, the mac filteing is bypassed, since the wlc has the mac filter list.

billytsang Tue, 01/31/2012 - 18:49
User Badges:

Thanks Scott,


Is there any documents to record the issue, thanks?

Scott Fella Tue, 01/31/2012 - 18:56
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 Wireless

The documents on h-reap just state the same thing. The reason Mac filter works is because traffic flows to the wlc. So when you loose the connection to the wlc and the h-reap ap goes into standalone, there is no way to perform Mac filtering because the ap does not know of the Mac address. Makes sense?


Thanks,


Scott Fella


Sent from my iPhone

Josh Morris Wed, 10/24/2012 - 08:27
User Badges:

Can you confirm that you mean when the AP is in "AP mode: local" that MAC filtering will not work? Or does the "AP mode" need to be H-REAP for mac filtering to not work?

Saravanan Lakshmanan Sun, 10/28/2012 - 14:05
User Badges:
  • Cisco Employee,

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080b3690b.shtml


FlexConnect Feature Matrix

Legacy and New Features in 7.0.116.0 and Above


Security - Client

Depending on the modes and states, security support on the FlexConnect varies. This table summarizes the security features supported.


WAN Up (Central switching)WAN Up (Local Switching)WAN Down (Standalone)
Open/Static WEPYesYesYes
WPA-PSKYesYesYes
802.1x (WPA/WPA2)YesYesYes
MAC AuthenticationYesYesNo
CCKM Fast RoamingYesYesYes, for connected clients. No, for new clients.

Actions

This Discussion

Related Content

 

 

Trending Topics - Security & Network