Base Radio Mac and SSID MAC addresses

I am looking for a way to obtain the SSID mac addresses from a report or other method. We have clients attaching to an SSID that show a MAC address that I am positive is the MAC of the SSID (based off the physical MAC of the Radio) but I cannot find it either in reports in WCS or on the controller.
Thanks!

try the following command via the CLI
show dot11 bssid
Examples
This example shows how to display a list of BSSIDs and SSIDs:
AP# show dot11 bssid
This example shows the command output:
AP1230#show dot11 bssid
Interface BSSID Guest SSID
Dot11Radio1 0011.2161.b7c0 Yes tsunami
Dot11Radio0 0005.9a3e.7c0f Yes WPA2-TLS-g
from this doc
http://www.cisco.com/en/US/docs/wireless/access_point/12.3_4_JA/command/reference/cr34main.html#wp2701427
let me know if this helps
Bill

Similar Messages

Cisco 4402 LAP1131 Interference Profile Failed for Base Radio MAC:

Dropped connections every day, few times a day.
WLC Was working perfectly fine for about a year then had some dropped connections.
Upgraded to the latest firmaware and also default it to the factory and reconfigured it.
Same problem!
Cisco 4402
Software Version 7.0.98.0
8x Cisco: AIR-LAP1131AG-A-K9 also v/7.0.98.0
Interference Profile Failed for Base Radio MAC:

This is a threshold parameter: "Interference Profile failed" along with some others. All this does is send alerts to the WLC log, to your syslog or to your WCS/NCS or Prime Infrastructure management tool. You need to adjust these for your environment if you see too many alerts being triggered. Interference can be a main issue in downtown big citites and you would bump the value up to reduce the number of alerts you see. Yes interference will cause issues, but this is an alert threshold and will not fix your interference, just tell you that you have interference due to hitting the X value.
Thanks,
Scott
*****Help out other by using the rating system and marking answered questions as "Answered"*****

Do I need to add Base Station MAC address to list?

Hi, If I choose to use MAC address filtering on my Airport Extreme Time Capsule, do I need to add the wireless MAC address of the Base Station to the list of allowed MAC addresses??? I'd feel real bad if I set up a list, didn't include the base station's MAC address and then could never get in to the network again because I, in effect, locked myself out??? I doubt that address needs to be included but I would like some feedback on that.
Second, does the one MAC address filter list apply to the Guest Network as well if I should choose to turn it on??? If that was the case, I would just turn off MAC address filtering why guests were present.
thanks.. bob

If I choose to use MAC address filtering on my Airport Extreme Time Capsule, do I need to add the wireless MAC address of the Base Station to the list of allowed MAC addresses???
No. Timed Access would be for wireless devices....computers, mobile devices, printer, etc., that are connecting to the Time Capsule. The Time Capsule does not connect to itself in this regard.
I'd feel real bad if I set up a list, didn't include the base station's MAC address and then could never get in to the network again because I, in effect, locked myself out???
Sometimes, users lock themselves out by mistake by entering incorrect times for devices to connect, and they often forget that they can connect to the base station using an Ethernet connection and get back in that way.....since Timed Access only applies to devices that connect using wireless.
does the one MAC address filter list apply to the Guest Network as well if I should choose to turn it on???
Yes

Radio subinterfaces and # SSID

Hi,
I have Cisco AP350 with IOS software witch doesn't allow to broadcast more that one SSID. BUT according to this document:
http://www.cisco.com/en/US/products/ps5853/products_configuration_guide_chapter09186a008045830f.html#wp999807
it is possible to make subinterfaces with different VLAN encapsulation and assign different SSID for each VLAN.
So my question : can i deploy this with my AP? or the early mentioned limitation is related to the AP350 itself?
Think you in advance

"encapsulation dot1q 2" means dot1q encapsulation enabled on VLAN 2.
"encapsulation dot1q 111" means dot1q encapsulation enabled on VLAN 111

Get AP Ethernet MAC and Radio MAC command

Hello,
I would like to get a list of the associated APs on my controller. I would like the list to show the name of the AP, the Ethernet MAC, and the Base Radio MAC address. I planned to do a show run-config, save that information to a file and then parse that file for the information I want, but I am guessing there is an easier way. If so I would appreciate a point in the right direction as I am having trouble locating such a command.
Thanks,
Mike

leolaohoo wrote:I would like the list to show the name of the AP, the Ethernet MAC, and the Base Radio MAC address. I hope you like doing this CLI because the command is: sh ap config general I planned to do a show run-config, save that information to a file and then parse that file for the information I want, but I am guessing there is an easier way.Here's an easier way: What config???? The AP doesn't have a config, per se. All the config comes from the WLC. The only thing different are the IP addresses, hostname and location (among other things).
I do like doing things the CLI way. However the command sh ap config general does not show the Radio MAC address. It only shows the Ethernet MAC.
I know the vast majority of the config is on the controller. I said in my question that I want to view that information for all APs on the current controller. When I referenced show run-config I meant on the controller. The output of that command shows all the information I want (AP Name, Ethernet MAC, Radio MAC, for ALL APs) but it also displays a barrage of other information. I was hoping there was a command that still displayed all of that information but in a more concise way.

Understanding Wireless Mac Address

Hi,
I would like to know te range of mac address used for only Cisco Wireless, and I would appreciate to know how the ap and the controler assign the virtual mac address they use and how to get them from the WLC gui.
WLC - 4400
AP - Air1131
Thanks

As you add SSIDs (Service Set Identification(s)) to an access point each BSSID (Basic Service Set Identifier) receives a virtual mac address. This allows for wireless network segmentation as well as for wireless clients to communicate via LAYER 2 with each access point BSSID.
A Cisco access point takes the base radio mac address and then virtualizes the mac address as additional SSIDs are added. What is interesting is how the virtual MAC addresses are selected. Pay very close attention to the 2.4GHz and 5 GHz radios and BSSIDs.
BASE RADIO MAC ADDRESS
You can find the base radio mac address under WIRELESS->Select Access Point
Virtualized BSSID(s)
I configured a controller with 16 SSIDs. Each SSID named as 01,02,03,04,05,06, 07,08,09,10,11,12,13,14,15 and 16. I then enabled both the 2.4 GHz and 5 GHz radios. Cisco WLC access points have a limit of 16 SSIDs on each radio.
I then fired up AirMagnet WiFi Analyzer Pro to conduct a capture.
Note: The access point base radio mac address ends in A9:10.
2.4 GHz – Notice the first SSID ‘01’ is assigned the BASE RADIO MAC ADDRESS A9:10. The second SSID is appended with a .11 and so on.
5GHz – Notice the sixteenth SSID ‘16’ is assigned the BASE RADIO MAC ADDRESS A9:10. The fifteenth SSID is appended with a .11 and so on.
NOTE: The VIRTUAL MAC ADDRESSES get reused by the access point on both the 2.4GHz and the 5GHz radios.
Virtualized BSSID Assignment
Keep in mind, the assignment or order in which the virtual mac addresses are assigned in the above example has nothing to do with the WLAN IDs that are configured in the WLC. Rather, the virtual mac addresses are assigned in order by how the SSID is assigned to the access point.

Different AP MAC address shown on wireless client logs

Hello Everyone,
I am really a rookie on wireless networks.
I am investigating an issue where people is unable to do wireless at 2 floors in a building. We are using LAPs.
I asked a person onsite to send me some logs from his Intel Proset tools. The report he emailed me shows no IP Address is being assigned to his PC.
I noticed that the AP MAC address on the logs he provided is lets say ##:##:##:2D:AC:61, I check on the WLC and the AP MAC address is actually
##:##:##:2D:AC:60
Is that an expected behavour, a known issue or something like that?
Your input will be appreciated.
Thanks,
David M.

David,
Yes, its the virtual mac. I actually blog in detail about this subject of the virtual mac. Read the below link and you will have your answer!
http://www.my80211.com/home/2011/5/2/wlc-how-cisco-virtualizes-the-base-radio-mac-address-on-the.html
If you find this helpful please kindly support the CSC rating system!
btw -- Welcome to the world of WiFi!

Lightweight AP authorization lists: Which AP MAC address to specifiy - AP Ethernet or AP Base Radio?

I'm trying to use the AP authorization list feature on a lightweight access point controller, and am hoping someone can clarify when specifying the MAC address of the AP along with the certificate type should the AP Ethernet MAC be used or the AP Base Radio MAC be used?

Ethernet MAC.

How do I clone my computer's MAC address on to the AE base station?

This is just driving me nuts. I've looked at responses to this question on the internet, and it appears that the Airport Extreme Base Station can't perform a function that nearly all WAN home routers have been able to perform for a decade: "cloning" a MAC Address. My internet provider uses the MAC address of one of my computers to identify a valid connection, and my old Belkin router just cloned the computer's MAC address. If the AEBS can't do that then it's a rather serious design flaw, and if I'd known that I'd never have bought the device. I noticed that there's something called a "Client ID" so I input my computer's MAC Address for that, but the Base Station still can't connect to the internet.
I don't want to have my ISP reset my valid MAC address (even if they could, which isn't clear to me) because I may need to connect to the internet directly in the event of problems... say the Base Station malfunctions.
I bought the base station so that I could connect peripherals to it, but if it can't connect to the internet that renders it practically useless.
Are there any workarounds? Anyone have any ideas?

I can see that no one is bothering to respond to this question, so I thought I'd post a resolution. I don't know if one can alter the ID of the AE Base by cloning a computer's MAC address. The next best thing would be to easily alter the MAC address that the ISP identifies as legitimate. If you have COMCAST's telephone modem (which has a battery backup so that it can't be rebooted by simply unplugging it) you can adopt the following procedure to reset the MAC address.
1. Reset the base station, by depressing the reset button in back with a pen or paper clip.
2. Unplug the base station.
3. Reset the Comcast cable modem, by depressing the reset button in the back with a pen or paper clip.
4. Plug the base station back in.
5. Use the Airport Utility to set the parameters of Airport Extreme.
This procedure will force COMCAST to recognize the Base Station MAC Address as legitimate for provisioning.
It's not an ideal solution, but it works. If the Base Station fails and you have to use a direct connection to your computer you can follow a similar procedure to reset the modem, and recognize a new MAC address.
Again, the fact that you can't use the Base-connected drives for Time Machine is just plain dumb. Apple originally touted this as one of their main selling points, and then just backtracked. They need to reintroduce this functionality in the next update of Leopard... and it wouldn't hurt to issue an apology for having misled people. The stone wall just ****** people off, as it should.

WEP with MAC address

Hi,
I have successfully configured the multiple SSID in the Access-point. But I am not able to achieve my objective. I want to allow only one user laptop to connect with this SSID. Currently I have applied the max session configuration but I want to bind the MAC address with this SSID. So that on the base of MAC address users can connect with SSID EMGAS which is configured for WEP.
dot11 ssid EMGAS
   vlan 24
   max-associations 2
   authentication open
   guest-mode
interface Dot11Radio0
no ip address
no ip route-cache
encryption mode ciphers tkip
encryption vlan 1 mode ciphers tkip
encryption vlan 25 mode ciphers tkip
encryption vlan 24 key 1 size 40bit 7 88953EF67928 transmit-key
encryption vlan 24 mode wep mandatory
ssid EMGAS
ssid GUEST
ssid WAP
dot11 ssid EMGAS
   vlan 24
   max-associations 2
   authentication open
   guest-mode
interface Dot11Radio0
no ip address
no ip route-cache
encryption mode ciphers tkip
encryption vlan 1 mode ciphers tkip
encryption vlan 25 mode ciphers tkip
encryption vlan 24 key 1 size 40bit 7 88953EF67928 transmit-key
encryption vlan 24 mode wep mandatory
ssid EMGAS
ssid GUEST
ssid WAP
Kindly assist me how to achive the MAC base restriction in the SSID (EMGAS).

You can do an ACL and block it from the AP. (See below)..
But to do it by SSID I think you will need a radius server ...
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008058ed26.shtml

Router MAC Addresses

Hello all.
Is it correct that routers don't have a base Ethernet MAC address (but switches have) and the only MACs that routers have are the BIAs in the interfaces?

Hello Collin.
Depends. Are you talking for something like spanning tree or for something like HSRP/VRRP? Generally speaking in STP, a switch has a base MAC (chassis's use the Sup MAC, stackables typically use use lowest interface -1).
Is the base MAC used for STP different from the one used in HSRP? I'm actually referring to the base MAC shown in the output of sh version on a switch. I just noticed that routers don't have a base MAC in the output of sh version.

Static NAT and same IP address for two interfaces

We have a Cisco ASA 5520 and in order to conserve public IP addresses and configuration (possibly) can we use the same public IP address for a static NAT with two different interfaces? Here is an example of what I'm refering too where 10.10.10.10 would be the same public IP address.
static (inside,Outside) 10.10.10.10 access-list inside_nat_static_1
static (production,Outside) 10.10.10.10 access-list production_nat_static_1
Thanks for any help.
Jeff

Hi Jeff,
Unfortunately this cannot be done, on the ASA packet classification is done on the basis of mac-address, destination nat and route, and here you are confusing the firewall, to which interface does the ip belong to. I haven't ever tried to do it, but it should cause you issues.
Thanks,
Varun Rao
Security Team,
Cisco TAC

Dual Boot and Same IP Address

Hi there,
thinking of installing XP on boot camp in my corporate environment, can anyone give me any indication that it would be problematic to have both the windows and mac os IP setting as the same, considering they will not both be on at the same time,
We are running low on our IP allocation from our Local Education Authority and wondered if this would work or cause issues, our Mac's are bound to OD and authenticate with AD, hoping to bind XP to AD domain for docs and windows programs
any thoughts welcomed
timaceuk

Hi Jeff,
Unfortunately this cannot be done, on the ASA packet classification is done on the basis of mac-address, destination nat and route, and here you are confusing the firewall, to which interface does the ip belong to. I haven't ever tried to do it, but it should cause you issues.
Thanks,
Varun Rao
Security Team,
Cisco TAC

Time Capsule Set Up - SSID Broadcast and MAC Address filtering

How does one set up TC for MAC address filtering, and also to disable SSID broadcast? Apple store salesman assured me I could do both, but had no idea how. I can't find anything in the set up. I am used to looking at Linksys routers, so maybe it is buried somewhere.

Selecting only "Timed Access" doesn't really fully activate MAC Address filtering. Even you have that enabled any wireless client can join the network (provided they know the password, if you have any and the SSID, if disabled). You also need to do this:
In the AirPort Utility > Manual Setup > Access screen, the MAC address of the TC (defined as "default") is always listed. Select that and press "Edit" and on the next page, under ".... set the default network time limits" select No Access from the drop down list and then that will prevent computers that aren’t on the access control list from accessing the AirPort network. Is this what you wanted?
This is applicable to the new TC (I didn't have a old one, so can't comment) and it's undocumented. It took me hours to figure out. Hope this helps!!!

Same SSID different MAC address

Ok... This is the best place for me to post this I think...
I am sharing an internet connection and am relatively close to the router (linksys) but because of the materials my building is constructed with I get a **** poor connection. So, there is a closer range extender that I can connect to, the range extender is also a linksys range extender, and I have no problems when I connect to it. The only problem is actually getting connected to it in the first place. My computer will automatically connect to the router rather than the base station. They both have the same SSID, and obviously different MAC addresses. Is there a way to force my computer to only connect to the range extender and ignore the signal from the router?

I have no problems with the range extender itself. It works great. The problem is that my airport card cannot tell the difference between the range extender and the router. Sometimes it will connect to the router, and sometimes to the range extender. I want to force it to connect to a specific MAC address rather than using only the SSID. Is there a way to do this?

Base Radio Mac and SSID MAC addresses

Similar Messages

Maybe you are looking for