Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Is it possible to exclude selected clients from WLC WEBAUTH?

We use NOMADIX for only banner implementaion. So client gets  authenticated by WLC and has to click OK on the banner. Could have used  WLC for this but sometimes we need to exclude few devices that are not  capable of clicking OK on banner. Would be helpful if WLC has the exclude feature.

9 REPLIES
Bronze

Is it possible to exclude selected clients from WLC WEBAUTH?

You can deny access based on mac address.

On WLC, go to Security tab, choose Disabled Clients, and click the "New" button.

At my old company, we would use this when we got log entries on our firewall for people surfing porn on their iPhones.

They would then call the helpdesk and ask why they can't get on the wireless and we could refer them to the security team.

Ven

Ven Taylor
New Member

Is it possible to exclude selected clients from WLC WEBAUTH?

I do not want to deny access...some devices need extra privelege of not clicking banner after WLC authentication. In NONADIX we can give list of devices and they are home free. Example...environmental monitors, etc.

Re: Is it possible to exclude selected clients from WLC WEBAUTH?

Put mac-filtering and add your clients and go for web-policy On MAC Filter failure, this is supported in 7.0.116.0. I am not sure, which release this feature was introduced

Thanks

NikhiL

New Member

Is it possible to exclude selected clients from WLC WEBAUTH?

There are unknown clients joining the SSID, clicking the banner so I do not know their MAC address.

I only know the MAC address for the devices that do not want to use WEBAUTH.

Re: Is it possible to exclude selected clients from WLC WEBAUTH?

You enable mac-filtering and add those client -mac which you dont have to use web-auth, so that when they join they get authenticated. Those clients whose mac wasnt added, will fail authentication and go for web-auth

Thanks

NikhiL

Re: Is it possible to exclude selected clients from WLC WEBAUTH?

Did this resolve your issue

New Member

Re: Is it possible to exclude selected clients from WLC WEBAUTH?

I will implement this in couple of days and will let you know.

Thanks for the tip!

New Member

Is it possible to exclude selected clients from WLC WEBAUTH?

The option "On MAC Filter failure" show the banner worked to not show banner....but found an issue...for the users that need banner, they are in a loop. When they click ok the banner comes back.

The issue goes away if I disable MAC Filter Failure....all users can click OK and get redirected to the right destination.

Is it possible to exclude selected clients from WLC WEBAUTH?

or the users that need banner, they are in a loop

what does the above the line means

When they click ok the banner comes back.

please elaborate this also

680
Views
0
Helpful
9
Replies
CreatePlease login to create content