Mac Filter Wildcards? WLC

[ryan.turner]

I'm deploying several hundred handheld scanners and I dont want to create a mac filter for everyone, however that are all the same manufacturer, and that manufacturer only has one mac prefix, is there a way to just put the mac prefix in?  I'm using 5508's running 7.0.116.0.

Help files and searches turned up nothing.

Thanks.

[Amjad Abdullah]

Ryan:

This is unfortunately not available.

It will be great feature if provided but cisco still not doing that.

Sent from Cisco Technical Support iPad App

[George Stefanick]

If you have a radius server like acs 5 you can put your Mac list on the radius server and you can do mab, mac address bypass. Now I haven't don't this myself, but this will give you somewhere to look further.

Sent from Cisco Technical Support iPhone App

[Saravanan Lakshmanan]

MAC filtering only method of security is not secure, also mac filtering is useless since the mac addresses are visible on w.less packet capture and it can be spoofed.

[Jose Vazquez]

My problem is the opposite. I would like to ban / disable mac address begining to a given manufacturer because:

     - my wireless clients are of the same manufacturer

     - someone is scanning repeatly during months with hundreds of different fake mac address -but all of them begining with 00:0e:8e- and they are highly populating the excluded client table.

I suppose there is no solution for that until now

Thanks,

Jose

[Scott Fella]

There is no wildcard for Mac filter. The whole MAC address has to be entered.

Sent from Cisco Technical Support iPhone App

[mmangat]

Please check the following link which describes how to use MAC filters with WLC.

"MAC Filters with Wireless LAN Controllers (WLCs) Configuration Example"

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008084f13b.shtml

[Jwaas9876]

If you wish to deny access to a single wireless client by using their MAC address - use the following command from the CLI on the WLC:  config exclusionlist add <enter mac address> <description>

This was in response to j.vazquez.c issue.

[abwahid]

Hi,

This feature is not available.