Guest and E4200 - Mac Filtering

I have an e4200 v1. I have figured out that if mac filtering is enabled, the guest feature will only work if the mac adapter of the guest client is added to the list of allowed mac filters.
Doesnt adding a mac filter for guests defeat the whole purpose of the guest account? I find this very annoying. Does somebody know of a way to get this to work?

Don't use the wireless mac filter. It won't provide security anyway. Use WPA2 with AES and a strong passphrase.

Similar Messages

E1200 - browser utility cannot set up MAC filtering

The browser-based settings utility for my E1200 can't setup MAC address filtering. I go to the "Wireless MAC Filter" page and enable MAC filtering.
When I click the “wireless client list” button, a new window opens saying “IE cannot display the webpage”. This always happens when I have a wireless connection active.
When there are no active connections, then IE properly displays the MAC address table, but it is empty since there aren't any computers connected to the router.
Does anyone have a fix for this?

greencross:
"This. Just write down the MAC addresses of the devices you want to filter and input them manually. And just as gv said, MAC address filtering is useless if you want to hackproof your network. There are tons of sniffing / spoofing software out there to get around it."
Yeah, I saw that he wrote that, but I want the wireless client list feature to work.
As I understand the situation, the E1200 firmware has an entirely useless feature, but even if it wasn't useless, it wouldn't matter, because it doesn't work the way it's supposed to anyway!

T500 unable to connect to an unencrypted, MAC filtering router

Hi,
I have recently just bought a T500. Everything worked out fine until yesterday, when me and my roommate discovered traces of our internet connection being hacked into and used by someone else. We decided to just drop the encryption and use MAC filtering instead, but as soon as we did that my T500 can no longer connect. The error that was given was that the encryption settings are wrong, but I have compared all of my settings with my roommate(whose connection work) and found them to be identical. The MAC filter setting should have been done correctly, so I am wondering if there is any setting specific to a T500 that could cause this problem.

Hi Eternal,
I like to completely remove (i.e. un-install) Access Connections from my systems. It adds little to what can be done with standard Windows networking controls, and gets in my way by trying to "manage" my connections automatically. When things are working, AC causes no harm other than taking up RAM and CPU. But when trying to troubleshoot networking problems, AC is just another layer of unneeded complexity.
I'm not familiar with the 163851 error code; this thread seems to indicate that it's due to the wireless radio being off. (You might check your wireless kill switch on front left corner.)
Best regards,
Frank
Results of Your Ideal Business-Class Laptop survey, concluded 2009-07-29.
Did someone help you?
Say thanks! with a kudo.
Even better: Pay it forward, help someone else.

Guest networking and mac filtering

I have a dual band airport extreme that I've purposfully kept at an old firmware revision because I have mac filtering enabled and also want to have guest network enabled. Somewhere around version 7.5 a bug was introduced that applied the mac filtering to both the private and guest SSID's. I found a number of posts from back then about it, but can anyone tell me if it has since been corrected in the more recent releases?
Thanks
Matt

Somewhere around version 7.5 a bug was introduced that applied the mac filtering to both the private and guest SSID's. I found a number of posts from back then about it, but can anyone tell me if it has since been corrected in the more recent releases?
No. For what it's worth, Apple Support does not call it a "bug". They call it a "feature".

Wireless Guest and mac authentication

Hi all,
I want to setup a wifi guest network with mac based authentication.
I already have the guest anchor controller and the remote wlc controller (and the mobility tunnel) up and running.
However, i am uncertain where i have to program the mac addresses: on the remote wlc or on the guest controller ? (for local database mac)
It seems my authentication only works if i program the mac address of the 'remote' wlc (the wlc holding the AP).
This is a pitty, as i was hoping to centralise all "appoved" mac addresses on the guest controller and not on each individual wlc seperatly.
Also, suppose i want a radius server to validate the mac address. Which controller is going to sent the radius request ? the wlc controller
managing the AP or the guest anchor controller ?
Does the remote wlc also need to be configured with "Layer2 security: none"+"mac authentication" (the same as the anchor controller) or can i put "Layer2:none" and put the anchor controller on "Layer2: none"+mac authentication ?
regards,
Geert

Hi Geert,
The rule is straightforward : layer 2 is handled by foreign WLC (one holding the AP) and layer 3 handled by the anchor (the guest).
This means the anchor WLC handles the dhcp/ip address, it handles the web authentication etc ...
But only the foreign WLC knows which AP the client is associated to, it's the only one to have layer 2 information so that's the one doing layer 2 authentication (wpa psk or mac filtering).
The way to "centralize" for you would be to have the mac addresses on a radius server or to push the mac addresses on the controllers via WCS.
Hope this clarifies,
Nicolas
===
Don't forget to rate answers that you find useful

E1200 - Ports not working and mac filtering problem

If there was a way to give negative stars to this router, I would. As it is, the minimum rating I can give this product is one star, and that's one star too many.
I was upgrading from the WRT54G, which is an ugly thing to look at, but a reliable workhorse nonetheless. I turned that in to a downstream switch in my comms hub.
On the E1200, I flashed the latest firmware, used different Cat5 cables, and different laptops before committing to hating this product.
The first time I reached out to Amazon, the Amazon rep gave me a Cisco number to call. Turns out, that's some shady mortgage refinance hotline. Try it for yourself! 1-800-666-1771.
Now, the rant -
1. Two out of four wired LAN ports don't work: What can be the fix for this?! The activity lights on ports 3 and 4 blink and suggest data transfer is taking place, but the wired laptop simply can't acquire an IP address and access the internet. Same result when I connect my Panasonic Blu-Ray player to ports 3 and 4. None of the Viera Cast features load.
2. MAC filtering unreliable: The wireless routing works somewhat reliably, if and only if, one settles for the most basic security. If I only choose a password and WPA2 protocol, things work fine. If I add another layer of security (in my case, enabling MAC filtering and only PERMITTING gateway to listed MAC IDs), things break down. As soon as I disable MAC filtering, wireless access to authenticated clients is restored.
3. Cisco customer service: The censored world we live in, compels me to criticize politely. TERRIBLE. Cisco website is unintuitive, and frustrating. There's no easy way to register your purchased product. The Cisco "registration" is intentionally misleading and deceptive. For all intents and purposes, it's just an information gathering tool for Cisco. Don't bother registering there, unless you love the idea of storing your personal information on their servers. Their phone-based customer service is apathetic and uninterested. My rep was so distrusting of my intelligence and motor control, that he simply wouldn't believe that I had selected "PERMIT" and not "PREVENT" as the option under MAC filtering. After he asked me the same question for the fourth time, I raised my voice, and he gave up the idea of checking for the fifth time.
However, this review is a tale of two companies. I reached out to Amazon again. This time, I got a rockstar in the shape of Leanne C! She was incredibly helpful, and understanding. What's more, she set up my return without any hassle and this Cisco dud is on its way back. I'm a big fan of Leanne's and my confidence in Amazon is restored.
I'm sure that i received a lemon. I've never had problems with Linksys products. Maybe others' experience is different from mine.

In your case as port numbers 1 and 2 does not work, what you could have done a loop back test. To perform a loop back test you need to take an ethernet cable, connect one end of that cable to internet port and the other end to the non-working port on the router. If you get the led to glow on both internet and the respective ethernet port that indicates that the port is working fine.
It could also be a sychronization issue between the above mentioned lan ports and the lan card of your computer. As a part of trouble shooting you can try to reduce the card speed of your lan card. Following are the steps to reduce the speed of your lan card.
START--> right-click My Network Places and click Properties
right-click on the device manager and click properties
Click on the CONFIGURE button
Select the ADVANCED tab and in the box under the header property select "speed and duplex" and change the value on the right to 10 mbps half duplex. A restart would be recommended after performing these steps.
In the second half you said that after enabling the mac filter option the internet breaks down. Here, do you mean to say that the computer
gets disconnected from the wireless network or it stays connected with a valid IP address but without an internet connection.
Well, it is an unusual issue however you could have reset and reconfigure the router as you got the latest firmware upgraded on it.
Steps to reset the router:
Push the reset button on router for 30 seconds, turn off the router wait for 30 seconds and then power it on. Power light should blink when you perform the reset process.

AP1242AG WPA and MAC Filtering problem

Hello,
Presently I managed some AP1242AG in ofiice area
I need implement WPA and MAC filtering.
I found what :
In IOS 12.2(13)JA branch IOS and before, MAC authentication was supported
in conjunction with WPA.
In 12.2(15)JA and above, configuring MAC authentication with WPA does not
work. MAC Authentication passes everyone through.
I can't found IOS 12.2(13) in Cisco site.
Can anybody help me and give link to download 12.2(13)JA ?
Thanks.

Also when I acivete MAC filterring
access-list 700 deny   0024.d7ed.2204   0000.0000.0000
access-list 700 deny   0000.0000.0000   ffff.ffff.ffff
dot11 association mac-list 700
dot11 ssid zero!v
   vlan 390
   authentication open eap eap_methods
   authentication network-eap eap_methods
   authentication key-management wpa
   wpa-psk ascii 7 14531708030A2E1A3108212127015644
The WPA is working but MAC filtering not reject
IOS Ver.
Cisco IOS Software, C1240 Software (C1240-K9W7-M), Version 12.3(11)JA1, RELEASE SOFTWARE (fc2)

Mobility groups and MAC filtering

We have a 4402 controller and we are doing MAC filtering. We have reached the default number of MAC addresses, 512. It has been recommended that we add an additional controller instead of increasing this past the default. Three questions:
1. Is there an increased (enough to impact performance) load placed on the WLC if the limit of MACs is increased, say to the max of 2048?
2. If we add an additional controller, configured in a mobility group, how do we configure the MAC filter to load balance? Or do we have to configure the same MAC table on both controllers? Which leads to....
3. Is there a benefit to adding another controller as far as MAC filtering is concerned?

As it stands, you would need to manually replicate internal mac filtering database between two controllers, so you're not gaining much with the second controller. As regards to increasing database size and what effects it will have, I don't have an educated answer for you, sorry.
Regards,
Roman

About max local MAC filtering can be register in WLC 2504 and 5508

Hi all
My customer is considering to use WLC with MAC filtering feature (use local database not external Radius). So they are concerning about maximum local MAC filtering entries that can be register on WLC2504 and WLC5508 to buy (the number of APs is about 20, but the MAC is more than 200)
I tried to search, but I could not find any specs mention it. If anyone knows, please help to answer
Rgds

I looked at this before. I want to say its maxed at 2048 regardless of the model ..
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/91901-mac-filters-wlcs-config.html

Aironet 600 with Mac Filtering and a switch..

How does the Aironet 600 handle Mac Filtering if I were to connect a switch to port 4 on the back ("Secured" network port). Does it authenticate each MAC or does it do somthing similar to how 802.1x with multi-host works, the first mac authenticates and then the port's wide open? My use-case here is a printer at a remote home-office. The printer doesn't have a supplicant in it so I need to use mac filtering. Thanks.

MAC authentication is all I use for my OutStationed workers. No wifi, just the rlan. Since the rlan is configured for DHCP only, no IP gets passed until MAC auth occurs.
When Cisco packaged this up, they said 4 is enough.. IF you use an un-managed (non-cisco) switch.
I had a need for 2 workstations and 2 digiports.. SOP sys a managed switch.. oops. the switch consumed 2 MAC's right off the top.. 1 for itself and 1 for each vlan.
After enablilng 2 rlans, and configuring a pair on different networks, we discovered that they were bridged in the 602 (or somewhere).
We ended up switching out the 602 for an ASA5505

WLC 4402 Web Authentication, Mac Filtering and Layer 2 Seciruty

Hi All,
I have configured web authentication and Mac filtering on WLC 4402 for my wireless network and its working fine. I wants to configure layer 2 security for the same Wireless network without pre shared key. Could you please advice how to configure layer 2 security with web authentication withour preshare key.
Is there any security issue with web authentication and Mac FIltering only? My concern in my wireless network shows open.
Thanks,
Kashif

Hi,
if you have a ACS, then you can do Web auth Splash page!!! Please refer to the below doc!!
http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080956185.shtml
Lemme know if this answered ur question!!
Regards
Surendra

Mac can't see new printer-told to Disable Airport Extreme Firewall and Mac Filtering...

I have a new Epson WF-3520 AIO printer. I run Mac on OS X 10.5.7. The printer appears to be properly set up to run wirelessly but it doesn't show up as a choice to be added to my list of available printers. My Mac just doesn't see it. After trying many things Epson's tech support told me to call Apple and find out how to disable the Airport Extreme's firewall as well as Mac Filtering. I went into the Airport's utility and just got lost in knowing exactly what steps I need to take to do this. Also, I'm somewhat dubious that this is really what needs to be done in the first place and I'm wondering if he simply wanted to get off the phone.... All advice welcome! Thanks. Stephanie

Forget it.... My suspicion was correct. I was talking to an idiot. Problem resolved by me. Unrelated to Airport.
Forgot to install a piece of software... duh!!!

WAG54GS CD and MAC Filtering

Hello,
1) Where can I obtain a Install CD for my WAG54GS Router?
2) I have had the WAG54GS in use for some years now, and more and more computers and devices are to the router.
Recently my Printer (HP 6500) often tells me that it cannot obtain an IP address but it does t "see" the SSID Router name.)
Error roughly translates (German) to
Your Router uses MAC Filtering. So a Connection the HP Printer may fail.
I must either deactivate the MAC filer or add the Printer MAC Address to the allowed list.
I am unsure how to do this.
Any help on both of these comments.??????
NT

OK, thank you.
I keep losing IP addresses now fron my PC's as well a my printer. Usually a router re-boot helps.
The thing I did not like about this WAG54GS is that there is no power fail re-start.
Have you any idea why losing the IP address occurs. Note that the SSID is being recogonised and with a healthy
signal level.
However
A am sending on Channel 1 but there is a TP-LINK 504132 Router in my neighbourhood that is on channel 1
(2,412 GHz) and is sending 802.11n and seems to be tranmitting a much higher speed than me.
I wonder if this could be causing problems.
Regards

EA2700 bridging and mac filtering

I have a EA4500 as a main router and a EA2700 router connected to it (wire) in bridging mode.
On the EA4500 I use mac filtering for the wireless connections.
My problem:
If a device connects wireless to the EA2700, the EA4500 see this as a LAN connection and thus the MAC filter is bypassed.
Can this be solved?

You can try this, bridge the 2700 router and use the following LAN-to-LAN configuration to see if the 4500 sees the device correctly:
http://www.northshore-it.com/tips/how-tos/cascade_linksys/#LAN_to_LAN
It's possible that the design and detection behavior of the 4500 with the use of a wired 2ndary AP maybe how it's detecting the client devices since it's connected wirelessly to the 2700 however when it goes thru the 2700 to the 4500, it's over a LAN wired connection and thats what the 4500 is seeing.

Configuring MAC Filtering with WRT1900AC and RE6500

Set up the WRT1900AC with a unique SSID (broadcasting turned off), WEP Personal, and MAC Address Filtering (only allow devices listed). Then connected the RE6500 to the WRT1900AC (again, used same SSID turning broadcast off with WEP Personal). RE6500 inidcated all was configed properly (white light stayed solid). Could not connect to the internet (even though the connection for the RE6500 showed up on the WRT1900AC network map) either via wirelessly connected to RE6500 or wired through on of its ethernet ports. Went back toteh WRT1900AC and turned MAC address filtering off - and all connections started to work (wired and wirless). Same MACbook laptop can connect directly to the WRT1900AC with MAC Address Filtering on but can not wirelessly connect from RE6500 to router. Anyone get this to work? See what I might have done wrong?

Typo, I am using WPA2 Personal. You didn't answer my question about Mac Address Filtering though. If enabled, and wirelessly connected to the ROUTER....it works as expected (thus all MAC addresses are entered correctly - in fact they were copied directly from my old Linksys router). If enabled, and connecting through the RANGE EXTENDER, I can not access the internet. Either through a wired connection (that is connected to the Range Extender) or a WIRELESS connection - connecting to the Range Extender. I know Wired connections to the Router are unaffected. Wired connections to the Range Extender will not be seen as wired connections to the range extender though.

Guest and E4200 - Mac Filtering

Similar Messages

Maybe you are looking for