We use MAC address filtering ONLY to allow /disallow access to our 350 series access points which we have 6 of. A newly purchased unit running 11.23T allows access to all MAC addresses even though I have explicity specified all Unicast as "Disallowed", which refuses connections to all with the exception of those "allowed" in the MAC address filters table, of course.
No other filtering, encryption, or other methods to prevent access is being used as we need to leave everything wide open for approved connections (we provide hotspots for business travelers in Hawaii).
I'm wondering if I'm maybe missing something that's in the new software version. The other units are running 11.05. Thanks!
I appreciate the response, but doing a restart doesn't solve the problem. I upgraded the firmware to 12.00T just to make sure everything was up to date, but that still does not make the filters work properly.
FYI, the 12.00T version no longer contains the Unicast Address Filter setting on the AP Radio Advanced page as described THROUGHOUT the Cisco support pages. I don't have a clue at this point how I found it in the end, but as is mentioned in the link you provided above, on the AP Radio Advanced page, about 1/2 way down, there's a link to: Advanced Primary SSID. THIS link will take you to the Unicast Address Filter section.
If this works, it doesn't make any sense. Our setup allows no one in unless their MAC address is in the filter list. As far as I'm concerned, "mac authentication alone **IS** sufficient for a client to be fully associated" so the selection should be set to YES, not NO. It's the only thing the 350 is looking for. (You're in the list? Fine, do what you want. You're not in the list? Get lost!)
Transferring Crash file from standby:
Login to the Active WLC in HA.
(Cisco Controller) >transfer upload datatype crash
(Cisco Controller) >transfer upload filename <Desired filename>
(Cisco Controller) >transfer up...
This is the start of a display filter cross reference between Wireshark and OmniPeek.
The 1st installment is a table of advanced filters. More filters will be added as time allows.
It is a living doc, so check back for changes every so often
Please feel ...
I have created a Powershell script to automatically add a Wireless Guest User on Cisco WLCs. (tested on 2500 Series)
The script should be completely self explanatory.
Powershell SNMP Module (Install-Module -Name SNMP)
SNMP Write Access to...