Cisco Wireless Flexconnect doesn't support mac filtering

kamlenegi · ‎04-26-2016

Hi All,

It seems that, mac filtering doesn't support in flexconnect environment.

Is there another solution for mobile users for authentication, instead of PSK.

We have ISE with base license.

Thanks

Kamlesh

ali aqrabawi · ‎04-26-2016

the mac filtering is not supported in stand alone mode , will your AP be in stand alone mode frequently ? if not then you can use mac filtering .

you can use 802.1x authentication , and it will work in connected and stand alone mode .

kamlenegi · ‎04-26-2016

Hi Ali,

We are using WLC 5520 and lightweight APs 1700. There is no AP in Standalone or Autonomous AP. How can I achieve the requirement for mobile devices.

Thanks

Kamlesh

Oscar Andres Rivera Cortes · ‎04-29-2016

Hello,

You have WLC 2504, APs on flex-connect and ISE, do you want to use 802.1x and have users log on with their AD credentials and use an eap method or maybe you want to use a web portal for wireless clients to authenticate?

Here you have some references that may help you:

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/82135-wlc-authenticate.html

I do not know that much about licensing on ISE so not sure which one you could do with the one you currently have,

Also, there may be some variations depending if you want the authentication to go through the WLC or have the AP on flex-connect mode be the authenticator. I would let the WLC do it.

Regards.