[ACS 5.4] PEAPv1 authentication with MAC filtering

[Patrick Tran]

Hi,

Our WiFi use PEAPv1 Authentication.

It works fine with different devices (computer, tablets, smartphones).

Now I want to filter enterprise devices. We have all MAC addresses of thoses devices.

Is it possible to enable PEAPv1 authentication combined with MAC filtering in Cisco ACS ?

I dont want to filter MAC addresses on WLC...

Thanks,

Patrick

[edwjames · Accepted solution]

Hi Patrick,

See if this helps:

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008084f13b.shtml

https://supportforums.cisco.com/thread/2163123

Agentless Network Access:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.3/user/guide/common_scenarios.html#wp1053005

Ed

[Patrick Tran]

Hi Ed,

Thanks for your help

I checked MAC Filtering option on WLC and now it works !! Host Lookup is done before PEAPv1 authentication.

Best regards,

Patrick

[edwjames]

Is it possible to enable PEAPv1 authentication combined with MAC filtering in Cisco ACS ?

YES !

Ed

[edwjames]

Hi Patirck,

I am working on creating a well formed document on this.

Do you by any chance have some screenshots that you can share.

It would be great to create some helpful content for all.

Also, I would like to know, did you enable the MAC filtering on the same SSID?

**Share your knowledge. It’s a way to achieve immortality.
--Dalai Lama**

Please Rate if helpful.
Regards
Ed

[Patrick Tran]

2 screenshots

On ACS

on WLC

Yeah, I enable MAC Filtering on the same SSID

[edwjames]

Thanks a ton Patrick.

**Share your knowledge. It’s a way to achieve immortality.
--Dalai Lama**

Please Rate if helpful.
Regards
Ed

[madhankumar.g]

Hi Patrick and Ed,

I am configuring similar mac filtering mechanism in my network. The ACS rule is getting a hit for the allowed mac address. But the user is not asked for peap (username/password). Please help me in resolving the issue. I am attaching the wlc and ACS screen shots for the configuration done.

Regards,

Madhan kumar G