WLC 2500 does not support or don’t have MAB feature but you use MAC filtering for client or administrator authorization, you need to enable it at the WLAN level first. If you plan to use local MAC address filtering for any WLAN, use the commands in this section to configure MAC filtering for a WLAN.
Use these commands to enable MAC filtering on a WLAN:
•Enable MAC filtering by entering the config wlan mac-filtering enablewlan_id command.
•Verify that you have MAC filtering enabled for the WLAN by entering the show wlan command.
When you enable MAC filtering, only the MAC addresses that you add to the WLAN are allowed to join the WLAN. MAC addresses that have not been added are not allowed to join the WLAN.
Please check the below link for step by step configuration:
I disagree with Aqeel's recommendation because it does not address (doesn't even come remotely close) 802.1x. MAC filtering (aka MAC-based ACL) is very different to 802.1x.
We are running 802.1x on our wireless (we have ten Dynamic VLANs per site) and the clients gets "thrown" to the correct Dynamic VLANs based on their username. We have no printers (Ricoh, FX, HP, Brothers and Lexmark) because their support to wireless authentication weren't designed for enterprise environment (read-between-the-lines: Only for HOME environment network). All our printers are wired. All wireless printers have their wireless settings turned off.
Transferring Crash file from standby: Login to the Active WLC in HA.
From CLI: (Cisco Controller) >transfer upload datatype crash (Cisco
Controller) >transfer upload filename (Cisco
Controller) >transfer upload mode tftp (Cisco Controller) >transfer
This is the start of a display filter cross reference between Wireshark
and OmniPeek. The 1st installment is a table of advanced filters. More
filters will be added as time allows. It is a living doc, so check back
for changes every so often Please feel f...