Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Blocking a MAC address from Authentication to AIR-AP1230 12.3(8) JA

Anyone know the CLI commands for blocking a single MAC address from Associating to an AIR-AP1230 running 12.3(8)?

4 REPLIES
Silver

Re: Blocking a MAC address from Authentication to AIR-AP1230 12.

New Member

Re: Blocking a MAC address from Authentication to AIR-AP1230 12.

This link may help as well:

http://www.cisco.com/en/US/products/hw/wireless/ps430/products_configuration_guide_chapter09186a0080184aa0.html#91655

Change the Action to Block, make the Default Action Forward All, and make the mask 0.0.0.0. Apply this to the dotllradio interface (or sub-interface), filtering inbound packets. This should block the specified MAC address only.

New Member

Re: Blocking a MAC address from Authentication to AIR-AP1230 12.

I was looking for the CLI commands.

New Member

Re: Blocking a MAC address from Authentication to AIR-AP1230 12.

Commands are as follows to block MAC address abcd.ef01.2345:

access-list 750 deny abcd.ef01.2345 0000.0000.0000

access-list 750 permit 0000.0000.0000 ffff.ffff.ffff

Then on the dot11radio interface or sub-interface, apply the access list:

bridge-group 255 input-address-list 750

The bridge-group number is arbitrary here and corresponds to the interfaces you've created.

239
Views
0
Helpful
4
Replies