Cisco WLC Client MAC address backup to new Controller & ISE

Hi All,
We have an existing 4400 controller with MAC filtering for clients configured. Right Now, we are migrating to 5500 WLC and ISE setup.
We want to use MAC filtering due to company policies on the new Controller as well as ISE.
Is there a way (from GUI/CLI) that we can export the client MAC Addresses into an Excel file from existing WLC to new WLC & ISE?
Thanks,
CJ

On the CLI issue a show macfilter summary and then import that into excel or a text editor.
Sent from Cisco Technical Support iPhone App

Similar Messages

Cisco WLC username/mac address

Hi
Im are having problems with editing the User Field in the WCS. The purpose was to enable the ease to identify clients on the wireless network through their names rather than through MAC addresses which are currently the only method of authentication.
would appreciate it anyone could guide me in any form necessary in providing us to edit these details.

Just curious as to whether or not you figured out how to make this work. I would also like to get that set up.

WLC - How to block a single client MAC address?

Hi Sir,
On a WLC (software version 4.1.185.0), how to block a single client MAC address?
I thought of using the SECURITY -> Disabled Clients. Is it right?
There are currently 250 users connected to the WLC. MAC Filtering is not a scalable solution because as I understand it, we have to specify all the legitimate MAC addresses in the local database.
Thank you.
B.Rgds,
Lim TS

Hi Lim,
As you have discovered, the Mac filtering on the WLC is an Allow (based on Mac address) rather than what you need which is a Deny (based on Mac address). I have not tried this feature but I think you are on the right track in using the Exclusion List (Blacklist) feature. Have a look;
Use SECURITY > AAA > Disabled Client then click New or MONITOR > Clients then click Disable to navigate to this page.
This page allows you to manually Exclusion List (blacklist) a client by MAC address.
Add the MAC Address and an optional Client Description for the client to be disabled.
Note When you enter a client MAC address to be disabled, the Operating System checks that the MAC address is not one of the known Local Net clients ( Local Net Users), Authorized clients ( MAC Filtering), or Local Management users ( Local Management Users) MAC addresses. If the entered MAC address is on one of these three lists, the Operating System does not allow the MAC address to be manually disabled.
Hope this helps! Let us know.
Rob

HT4061 My gateway PC is locked up after itunes update. When i restarted the computer for the hangers to take effect. Now my pc is locked up. It gives me a client Mac address and no boot file name received. What happened, and how do I get my pc back?

jute way pc locked up after iTunes update. It says client Mac address 001320 be ad 25 . PXE E53 No boot file name received
pXE MOF. Exiting Broadcom PXE. ROM . How do I unlock my pc?

jute way pc locked up after iTunes update. It says client Mac address 001320 be ad 25 . PXE E53 No boot file name received
pXE MOF. Exiting Broadcom PXE. ROM . How do I unlock my pc?

HT4061 I downloaded an iTunes update on my HP. PC and restarted the computer for the hangers to take effect. Now my pc is locked up. It gives me a client Mac address and no boot file name received. What happened, and how do I get my pc back?

I downloaded an iTunes update and when ashen I restarted my pc it locked up. It says client Mac address 001320bead25, PXE E53 No boot file name received. PXE MOF. Exiting Broadcom pie rom. How do I get my pc back!

When you installed iTunes on your work computer, then connected your iPad to that computer, it wiped what was on the iPad, then put the iTunes library (nothing) from the work computer onto the iPad. You can try copying the iTunes folder from your home computer over to your work computer, but since the apps were bought with a different account, they may not load or update properly.

Where do I find the MAC address on my new Airport Express?

Where do I find the MAC address on my new Airport Express? There's no label like there was on my Time Capsule (now dead). I need to supply it to my ISP in order to get hooked up. Thanks.

If you use AirPort Utility 5.6, you will find the MAC addresses under Manual Setup>AirPort>Summary.
There should be three MAC IDs: one for each of the wireless channels and one for Ethernet.

Blocking Client MAC Addresses at Sup720/WLSM?

I want to block client MAC addresses at the central 6500, where the WLSM is located. Is there any solution like "dot11 association mac-list" at the accesspoints? I tried an "access-expression" on the tunnelinterface, but it did not work. Any suggestions?

Here is an example of config
switch(config)# mac access-list extended ARP_Packet
Switch(config-ext-nacl)# permit host 0000.861f.3745 host 0006.5bd8.8c2f 0x806 0x0
Switch(config-ext-nacl)# end
Issue the vlan access-map map_ name command and the action drop command, which is the action to perform.
The vlan access-map map_ name command uses the MAC access list that you created to block ARP traffic from the hosts.
Switch(config)# vlan access-map block_arp 10
Switch (config-access-map)# action drop
Switch (config-access-map)# match mac address ARP-Packet
Add an additional line to the same VLAN access map to forward the rest of the traffic.
Switch(config)# vlan access-map block_arp 20
Switch (config-access-map)# action forward
Choose a VLAN access map and apply it to a VLAN interface.
Issue the VLAN filter vlan_access_map_name vlan-list vlan_number command.
Switch(config)# vlan filter block_arp vlan-list 2

WLC - block MAC Address

Wireless system with 3 x WLC-4402, version 6.0.199.4, about 100 AP, about 300 clients.
I need to block some clients that are bombarding me with frequent and repeated "Signature attack" (Auth flood).
I tried to put the MAC Address in the black-list (Disabled Client), but it seams non work.
Other suggestion ?
Claudio

If its an authentication issue, then you can enable client exclusion on the WLAN also. 3 failures will automatically put them in the exculsion list. Not that I like pgrading, but the latest versions of 7.0.x are pretty good, but you need to make sure your AP's support that code. 6.x is pretty old.
http://www.cisco.com/en/US/docs/wireless/controller/5500/tech_notes/Wireless_Software_Compatibility_Matrix.html
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Linux client MAC address getting failure (Mr. Francois)

Hi Mr.Francois
I am using your client information form. Thank you.
But in Linux client
shows
IP & MAC addresses are blank
Any idea !
Regards

Because you did not provide details about which Forms version or client platform you are using it will be difficult to offer specifics. However, if you are using Forms 10.1.2.3 or newer, I would recommend trying to run the WebUtil demo form as it includes functionality to capture the client details. You can download the WebUtil demo from here:
http://www.oracle.com/technetwork/developer-tools/forms/downloads/index.html
It is listed under Forms 11g Demos, but the WebUtil demo is compatible with version 10 and newer. If you have never used this demo (or WebUtil) before, be aware that some features only work on Windows clients. Additionally, some features only work on Windows (32bit) clients.

Wlc 2100 mac -address issue

Hi all,
we are using wlc 2106-k9 controller, with mac based authetication for cilents. After few days mac-address database automatically deleted few mac-address. this is not first time it happen twice. we have entered totally 60 mac-address only . It has IOS AIR-WLC2100-K9-7-0-98-218.aes.
Thanks in advance.

I had the same problem yesterday and after many hours searching the web I ended up with this post that made me really desperate... But I didn't give up and while trying a new bios flash because of random crashes when in the bios, I noticed the obvious: you can change the MAC address when flashing
use the last version of the dos flasher with the parameters /nvmac:xxxxxxxxxxxx/wb after the name of the bios file; it's explained if you ask the help with the /help parameter. You can find the mac address on a stick on the parallel port.

Cisco WLC 5508 Mac Filtering

Hi Group, how are you?.
I know as Mac filtering feature works, but I need the opposite. I need to filter some mac-address to a particular SSID and permit all the other mac-address.
Please, has anyone any ideas?.
Thanks.
Andrés.

Hi Andres,
I think stephan was talking about vlan based access control via RADIUS:
check this document:
http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00801444a1.html
Regards
Dont forget to rate helpful posts

Reports for Apple devices with SCCM client - Mac Addresses and IP information.

Greetings.
I've been having an interesting problem.
I am currently running SCCM 2012R2 with PKI and have clients installed on windows, linux (ubuntu mostly) and apple computers successfully.
I have created custom report proving me with hardware information for windows and linux machines (Serial numbers, manufacturer, Mac Addresses and IP addresses) successfully.
So far I wasn't able to create any report or even find what table information about Apple computers MAC and IP addresses is stored.
If i go to Apple computer in SCCM using resource explorer under hardware I can see network devices, so that information is definitely gathered by SCCM in some way.
Can anyone help me out with this and maybe I am doing this in a wrong way?

Nice. Only trouble there seems to be multiple entry for same mac address there for same resource id.
So when I try to get them as substring i get multiple copies of same mac address.
But looks like this will work as solution to this problem.
So far I was doing it this way (And i am sure there is clearer way to do it.)
SUBSTRING((SELECT ',' + CAST(t2.MACAddress0 AS VARCHAR(40))
            FROM (SELECT DISTINCT ResourceID, MACAddress0 FROM v_GS_NETWORK_ADAPTER) t2
            WHERE t2.ResourceID = ResourceID
            ORDER BY t2.ResourceID, t2.MACAddress0
            FOR XML PATH ('')
        ), 2, 100) [MACAddresses]

Getting clients MAC address !!!

Is there any mechanism in Solaris where we can get the MAC address of an another system
Which is newly connected to the network (same subnet)
Situation is : a new system with out OS and its connected to the network, with out going to the console
of this system how to get the MAC address of it.
May be its possible may be not, anyway we are doing some testing and we have come across an issue.
Thank you.
VCP

If the system is set to boot from the network, which is the way that a lot of out-of-the-box Sun systems used to be (don't know if they still are), you could at least perform a rudimentary snoop of the network to see if there are any ARP/RARP requests that happen to appear when the system is turned on. You'll be able to see the resulting MAC address in the request. But, again, the system has to be set to boot from the network fr this to work.
Otherwise, I don't know of any way other than the console itself.

Cisco ip to mac address of a device?

What command can I run in CLI, to get a mac address that is associated with a provided ip address?
Context: In order to access wifi, users have to go through a web authentication. Upon submiting their credentials, we are able to see their ip address. We want to query router api with cli or something, to find a mac address based on the ip.
Any pointers?

It is usually not possible for a person to get the MAC address of a computer from its IP address alone. These two addresses originate from different sources. Simply stated, a computer's own hardware configuration determines its MAC address while the configuration of the network it is connected to determines its IP address.
However, computers connected to the same TCP/IP local network can determine each other's MAC addresses. The technology called ARP - Address Resolution Protocol included with TCP/IP makes it possible. Using ARP, each computer maintains a list of both IP and MAC addresses for each device it has recently communicated with.
Most computers allow you to see the list of IP and MAC addresses that ARP has collected there. In Windows, Linux and other operating systems, the command line utility "arp" shows this information. Using "arp," you can in fact determine the MAC address of some computers from their IP address. ARP works only within the small group of computers on a local area network (LAN), though, not across the Internet. ARP is intended for use by system administrators and is not generally useful as a way to track down computers and people on the Internet.

No access to old mac's backup with new mac

Hi forum,
I bought a new aluminium MacBook to replace my "old" black MacBook, and migrated all data and settings with the assistant via Ethernet-cable. Worked fine.
Now, I want to continue using the over 1 year of TM-backups created with the old mac, because there are some files that are archived in these backups.
To achieve that, I found some terminal-voodoo on the internet to update the MAC-numbers within the old backup-files and tried those. Now, TM continues to backup into the same folder on my TM-hdd.
BUT whenever I try to access a folder backed up with my old MacBook, I get an error-message saying that the folder cannot be opened, because I do not have the rights to do this. That's all, no way to enter any password or so.
What can I do?
Thanks in advance,
Michi

.mhuber wrote:
Now, I want to continue using the over 1 year of TM-backups created with the old mac, because there are some files that are archived in these backups.
To achieve that, I found some terminal-voodoo on the internet to update the MAC-numbers within the old backup-files and tried those. Now, TM continues to backup into the same folder on my TM-hdd.
That may have been a major error. That's for the same computer with either a new hard drive or new logic board, not a different computer. You've "fooled" TM into mixing backups from two different computers, and it likely has made the old ones un-usable.
BUT whenever I try to access a folder backed up with my old MacBook, I get an error-message saying that the folder cannot be opened, because I do not have the rights to do this.
Are you doing this via the Finder, or the TM interface?
If at all possible, use the TM interface, either via +Enter Time Machine+ or +Browse Other Time Machine Disks.+
If not, you might be able to copy some data via the Finder, but it's going to be tedious with all sorts of problems. First, as you see, you don't have permission to read the files. Second, you won't get the "metadata" -- permissions, creation date, open-with info, etc. Third, if you do manage to copy them, their permissions probably won't be what you want.
As a last resort, try this:
Navigate, via the Finder, on your TM disk, to the backup you want, then to the folder you want. Select it, then select Get Info.
At the bottom of that panel, click the padlock, then enter your Administrator's password.
Then click the plus sign at the bottom of the panel; that should give you a place to select your ID.
Clicking on that should give you "Read only" rights.
Clicking on the "gear" icon should let you apply those rights to the enclosed items.
Also, for future reference, do NOT depend on TM to keep "archive" copies of things you've deleted from your internal HD. TM will, eventually, delete them; you cannot prevent it. If you want to keep them, make other copies somewhere else.

Cisco WLC Client MAC address backup to new Controller & ISE

Similar Messages

Maybe you are looking for