Automatic MAC account creatation from Cisco WLC

[elodie.lu]

We are creating a BYOD network, have any of you tried this?

1) First time user attempts to connect to byod_ssid they are presented with captive portal page that requests AD credentials.  In the back ground users MAC address needs to be captured.

2) All subsequent connections to byod_ssid are MAC authenticated.

I am not finding any documentation on this process from the Cisco side.  What do you think?  Is it possible?

Thanks!

[Shaoqin Li]

you may do this via DRW on ISE

configure ssid with mac filtering, then on ise confignauthz rule with redirect to drw... register your device... CoA sent by ise... connect again and should work

sth similar to below , instead you are using mab

http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_guest_pol.html#wp1220041

Sent from Cisco Technical Support iPad App

[elodie.lu]

Sorry, but I forgot to precise that we don't have an ISE

[Abhishek Abhishek]

Hello,

As per your query i can suggest you the following link to refer-

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080bba10d.shtml

Hope this will help you.

[elodie.lu]

Is there any way to do it without ISE because we don't have this appliance?

[elodie.lu]

is it possible to do this with  configuring a Fallback Policy with MAC Filtering and Web Authentication? but with enough security (layer 2 or 3) to avoid mac address spoofing

[Scott Fella]

No... any MAC address has to be manually entered in the WLC. There is no "capture these MAC address and store it" feature on the WLC's.

Sent from Cisco Technical Support iPhone App

[elodie.lu]

What about configuring a Fallback Policy with MAC Filtering and Web Authentication?

I want just use this option.

Normally, there is a local database and with enabling the mac filtering and on MAC Filter Failure I have to find the mac address of the authenticate device on the wlc local database.

Authentication is done via AD credentials on a web portal.

[elodie.lu]

No suggestion?

[Scott Fella]

What exactly are you wanting to do? If you enter the MAC address manually, then that would work. If you expect the WLC to auto generate and store MAC address, it can't.

Sent from Cisco Technical Support iPhone App