Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Mac-Authen in 1141 AP not working with WPA!

I want to have my stand-alone 1141 to do Mac-Authentication locally and have WPA running to let the AP run in 11n mode but it is not running. I have tried having an No Encr and Mac-Authentication and it works.

I have read an article that WPA and Mac-Authentication don't work together. Is it right?

Please enlighten me on this.

2 ACCEPTED SOLUTIONS

Accepted Solutions

Re: Mac-Authen in 1141 AP not working with WPA!

Hi,

indeed the simplest is to have WPA and mac filters. Mac authentication allows to authenticate mac addresses against radius. Mac filters is an access list with mac addresses stored on the AP itself.

ap(config)#dot11 association mac-list ?
  <700-799>  Ethernet address access list

You can then configure an ACL (with number between 700 and 799) to go with that.

Regards,

Nicolas

Re: Mac-Authen in 1141 AP not working with WPA!

No.

Note that it's not an access list applied on the radio interface. It's a dot11 association maclist as the command says. So it filters association requests only. So it is only applied to 802.11 association request frames.

Regards,

Nicolas

4 REPLIES

Re: Mac-Authen in 1141 AP not working with WPA!

Hi,

indeed the simplest is to have WPA and mac filters. Mac authentication allows to authenticate mac addresses against radius. Mac filters is an access list with mac addresses stored on the AP itself.

ap(config)#dot11 association mac-list ?
  <700-799>  Ethernet address access list

You can then configure an ACL (with number between 700 and 799) to go with that.

Regards,

Nicolas

New Member

Re: Mac-Authen in 1141 AP not working with WPA!

MAC Filters, will this not affect AP's performance? coz as per understanding, each packet will be inspected and be compared to the access-list made.

Re: Mac-Authen in 1141 AP not working with WPA!

No.

Note that it's not an access list applied on the radio interface. It's a dot11 association maclist as the command says. So it filters association requests only. So it is only applied to 802.11 association request frames.

Regards,

Nicolas

New Member

Re: Mac-Authen in 1141 AP not working with WPA!

that's helpful sir! thank you..

395
Views
0
Helpful
4
Replies