i have not dealt with ACL's on a AP before.. But you describe the same behavior seen on a router.. To my knowledge ( someone correct me if im wrong) only the pix and asa appliances allow you to take out individual lines.
By far the easiest way i do it on a router is copy and paste the list into wordpad/word and do a replace on the accesslist name. Then add my change and then paste the ACL back into the device. Bam =) Just dont forget to switch over to the new ACL =) This also allows you to revert back to the previous known good ACL.
Suppose following command is configured on your AP:-
dot11 association mac-list 700
The above command shows access-list 700 is being as mac-address authentication list.If you want to remove "000c.412d.14c8" mac address from the list then use the following command:-
(config)# no access-list 700 permit 000c.412d.14c8.
Note:-If you have configured mac-address from GUI and now you are trying to configure it from CLI then you might get the follwing error"filter700 was configured on the interfacedot11radio0 using cli. it must be cleared via cli to ensure proper operation of the web interface";Therefore kindly make changes from CLI or GUI .
My issue is slightly different than the original question but I receive the "filter 700 was configured on the interface dot11radio0 using CLI. It must be cleared via CLI to ensure proper operation of the web interface" error if I have been making changes to my MAC filters via GUI, try to apply them but apparently get disconnected from my Internet session (page cannot be displayed), and go back into filter configuration. If you know the commands to clear the CLI interface, I would greatly appreciate it if you would pass that information to me. I have rebuilt the MAC ACLs on a different filter but this is time consuming. I am getting better at configuring the MAC filters via the command line but, with a small business, prefer GUI.
Transferring Crash file from standby:
Login to the Active WLC in HA.
(Cisco Controller) >transfer upload datatype crash
(Cisco Controller) >transfer upload filename <Desired filename>
(Cisco Controller) >transfer up...
This is the start of a display filter cross reference between Wireshark and OmniPeek.
The 1st installment is a table of advanced filters. More filters will be added as time allows.
It is a living doc, so check back for changes every so often
Please feel ...
I have created a Powershell script to automatically add a Wireless Guest User on Cisco WLCs. (tested on 2500 Series)
The script should be completely self explanatory.
Powershell SNMP Module (Install-Module -Name SNMP)
SNMP Write Access to...