Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

MAC Address Authentication

Guys,

I just want to know. Can I use the MAC Address Authentication without RADIUS server to join the SSID in my Aironet 1242?

I am using Autonomous mode.

Thank you very much for your attention.

Regards,

Edwin

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: MAC Address Authentication

Edwin,

Yes I believe you can.

I am not familar with all the methods available, but I have used these methods in the past.

1. This method applies the MAC address filtering globally across all dot11 interfaces on the device.

dot11 association mac-list 700

access-list 700 permit mac.address address.mask

2. This method applies the MAC address filtering on a per interface basis, and requires bridging.

interface Dot11Radio0.x

  bridge-group x input-address-list 700

access-list 700 permit mac.address address.mask

3. MAC Address Authentication to the Network - This method is best described in the following document.

http://www.cisco.com/en/US/docs/routers/access/wireless/software/guide/SecurityAuthenticationTypes.html#wp1034875

Method #3 may not be supported in certain IOS versions on certain platforms.

Others may know of additional methods, and/or correct any errors In the information I have presented here.

Hope this may be of help to you.

regards

2 REPLIES
New Member

Re: MAC Address Authentication

Edwin,

Yes I believe you can.

I am not familar with all the methods available, but I have used these methods in the past.

1. This method applies the MAC address filtering globally across all dot11 interfaces on the device.

dot11 association mac-list 700

access-list 700 permit mac.address address.mask

2. This method applies the MAC address filtering on a per interface basis, and requires bridging.

interface Dot11Radio0.x

  bridge-group x input-address-list 700

access-list 700 permit mac.address address.mask

3. MAC Address Authentication to the Network - This method is best described in the following document.

http://www.cisco.com/en/US/docs/routers/access/wireless/software/guide/SecurityAuthenticationTypes.html#wp1034875

Method #3 may not be supported in certain IOS versions on certain platforms.

Others may know of additional methods, and/or correct any errors In the information I have presented here.

Hope this may be of help to you.

regards

New Member

Re: MAC Address Authentication

Dear nlaberge,

I have used your method number 1 and it works.

Thanks for your explanation.

Regards,

Edwin

476
Views
0
Helpful
2
Replies