Cisco Support Community
Community Member

Configure Web authentication


Can we configure the wireless controller 5508 to authenticate the clients using both of MAC address Filtering (layer 2 security) and Web authentication (layer 3 security). and what is the difference between (Web policy --> authentication) and (Web policy --> on MAC filter failure)

Has anyone configured this security feature before ?

Plz advice


Re: Configure Web authentication


Here is the link where you can check on the layer 2 and layer 3 compatibility Matrix.

Community Member

Configure Web authentication

thanks Fbarboza for reply

actually the link you mentioned above did not open ,, could you plz send another link.

Cisco Employee

Re: Configure Web authentication

Yes, If a WLAN has both a Layer 2 (mac-filter) and Layer 3 security (webauth-on-macfilter-failure) configured, the client moves to RUN state if either one is passed. And if it fails Layer 2 security (mac-filter), the client is moved to Layer 3 security (webauth-on-macfilter-failure) i.e, when clients fail on MAC filter, they get automatically switched to webAuth.

Web policy --> authentication, it can or can't be used with mac filter, if mac filter enabled then it will be mandatory & can't fail to webauth like above.

Community Member

Configure Web authentication

thanks Saravanan for ur reply.

in our organization we need to perform double layer of security

firstly a MAC Filter for specific clients and after successfully passed the local filter in Wireless controller, the clients need to perform a web policy authentication by writing the username and password which are configured locally in the wireless controller database too.

is it possible ??

Configure Web authentication

Salam Hussein,

Yes it is possible.

You can enable mac-filtering on L2 security on the WLAN and webauth (on L3 security) at the same time.



Rating useful replies is more useful than saying "Thank you"
Community Member

Configure Web authentication

thanks alot Amjad..

CreatePlease to create content