Is it possible to exclude selected clients from WLC WEBAUTH?

[yprasannas]

We use NOMADIX for only banner implementaion. So client gets  authenticated by WLC and has to click OK on the banner. Could have used  WLC for this but sometimes we need to exclude few devices that are not  capable of clicking OK on banner. Would be helpful if WLC has the exclude feature.

[Ven Taylor]

You can deny access based on mac address.

On WLC, go to Security tab, choose Disabled Clients, and click the "New" button.

At my old company, we would use this when we got log entries on our firewall for people surfing porn on their iPhones.

They would then call the helpdesk and ask why they can't get on the wireless and we could refer them to the security team.

Ven

[yprasannas]

I do not want to deny access...some devices need extra privelege of not clicking banner after WLC authentication. In NONADIX we can give list of devices and they are home free. Example...environmental monitors, etc.

[nikhilcherian]

Put mac-filtering and add your clients and go for web-policy On MAC Filter failure, this is supported in 7.0.116.0. I am not sure, which release this feature was introduced

Thanks

NikhiL

[yprasannas]

There are unknown clients joining the SSID, clicking the banner so I do not know their MAC address.

I only know the MAC address for the devices that do not want to use WEBAUTH.

[nikhilcherian]

You enable mac-filtering and add those client -mac which you dont have to use web-auth, so that when they join they get authenticated. Those clients whose mac wasnt added, will fail authentication and go for web-auth

Thanks

NikhiL

[nikhilcherian]

Did this resolve your issue

[yprasannas]

I will implement this in couple of days and will let you know.

Thanks for the tip!

[yprasannas]

The option "On MAC Filter failure" show the banner worked to not show banner....but found an issue...for the users that need banner, they are in a loop. When they click ok the banner comes back.

The issue goes away if I disable MAC Filter Failure....all users can click OK and get redirected to the right destination.

[nikhilcherian]

or the users that need banner, they are in a loop

what does the above the line means

When they click ok the banner comes back.

please elaborate this also