Guest networking and mac filtering

I have a dual band airport extreme that I've purposfully kept at an old firmware revision because I have mac filtering enabled and also want to have guest network enabled. Somewhere around version 7.5 a bug was introduced that applied the mac filtering to both the private and guest SSID's. I found a number of posts from back then about it, but can anyone tell me if it has since been corrected in the more recent releases?
Thanks
Matt

Somewhere around version 7.5 a bug was introduced that applied the mac filtering to both the private and guest SSID's. I found a number of posts from back then about it, but can anyone tell me if it has since been corrected in the more recent releases?
No.  For what it's worth, Apple Support does not call it a "bug". They call it a "feature".

Similar Messages

  • E4200: guest networking and MAC filter

    Hi there,
    I have my e4200 setup with guest networking enabled and also MAC filtering. Somehow i was epxecting MAC filtering not to be applied to guest wireless network but it appears to be so.
    Can anybody please confirm if this is the case and if there's a workaround?
    Solved!
    Go to Solution.

    You are correct.  MAC filtering is universal in the router. There is no workaround besides not using it.

  • Guest Network and MAC

    Is there any way to set up a guest wireless network with a on/off schedual on my airport extreme.
    Is there any parental controls that can be set up as a "per computer" basis (It would just be on one computer connected wirelessly and it is running xp home)
    How do I set it up to only accept certain MAC addresses.

    Yes. It says so here.

  • AP1242AG WPA and MAC Filtering problem

    Hello,
    Presently I managed some AP1242AG in ofiice area
    I need implement WPA and MAC filtering.
    I found what :
    In IOS 12.2(13)JA branch IOS and before, MAC authentication was supported
    in conjunction with WPA.
    In 12.2(15)JA and above, configuring MAC authentication with WPA does not
    work. MAC Authentication passes everyone through.
    I can't found IOS 12.2(13) in Cisco site.
    Can anybody help me and give link to download 12.2(13)JA ?
    Thanks.

    Also when I acivete MAC filterring
    access-list 700 deny   0024.d7ed.2204   0000.0000.0000
    access-list 700 deny   0000.0000.0000   ffff.ffff.ffff
    dot11 association mac-list 700
    dot11 ssid zero!v
       vlan 390
       authentication open eap eap_methods
       authentication network-eap eap_methods
       authentication key-management wpa
       wpa-psk ascii 7 14531708030A2E1A3108212127015644
    The WPA is working but MAC filtering not reject
    IOS Ver.
    Cisco IOS Software, C1240 Software (C1240-K9W7-M), Version 12.3(11)JA1, RELEASE SOFTWARE (fc2)

  • Lost my guest network and VOIP is no longer....

    Hello peeps,
    So, this is what I DID have going on (sorry for any incorrect terminogly, I'm not overly techi)..
    Centurylink Lynx 220 modem, 3rd gen TC linked to that and from the TC I HAD my VOIP (voice over internet phone?) working just fine.  2 wireless networks, one as the household main and a guest network for......... well, guests lol..
    I have been spending a massive amount of time on the phone with centurylink just of late, we pay for 8meg downloads butwhen doing speed tests we were lucky to get 1meg.  So, we got a new modem....
    and this is what I have NOW....
    Westell 7500 Modem, 3rd gen TC linked to that, bloody VOIP is NOT working, LOST my GUEST network and for love or money I can't add another one, that option seems to have completely gone AWOL.....
    On the plus side, speed test now shows 7meg of download speed..
    Any idea on what has changed?  other than the modem change??  could that of made that difference?  Any idea on how to get my life back??
    We love the option of the guest network as we can turn it on and off for my Son.. Good boy = ON  Bad boy = OFF haa haaa haaa  how I love that power
    Any info would be great.. Thank you

    Guest network apparently.. (I haven't tested) does not work in bridge mode on the TC.
    https://discussions.apple.com/message/12853944#12853944
    As that is the case you must run the TC as a router. Update to latest firmware and latest utility if not already maybe a help.. or a hinderance if you are already there.. visa versa .. go backwards.. Apple don't get them right all the time.
    Secondly the modem should be in bridge and using PPPoE client on the TC so it is a full router. This may solve the voip issue as well since your modem may not be setup correctly for voip.

  • Guest Network and iTunes DJ

    Is it possible for users connected to the guest network to use iTunes DJ for an iTunes library which is on a Mac connected to the main network?

    The MAC address filtering is for the main wireless network and not for the guest network.
    The guest network is different from your private wireless network.  This is very convenient especially if you always have guests in your home who would like to access the Internet.
    When guests connect to the Guest network, they can connect to the Internet but will not have access to computers and devices which are connected to your Valet or Linksys Wireless-N Router.  The Guest network is a virtual network within your private network.
    The Guest network operates on a different IP address range (192.168.33.x).  This allows your guests to connect to the Internet without becoming a part of your private network.
    The guest will need the password to the network if they want to access the Internet.

  • E1200 - Ports not working and mac filtering problem

    If there was a way to give negative stars to this router, I would. As it is, the minimum rating I can give this product is one star, and that's one star too many.
    I was upgrading from the WRT54G, which is an ugly thing to look at, but a reliable workhorse nonetheless. I turned that in to a downstream switch in my comms hub.
    On the E1200, I flashed the latest firmware, used different Cat5 cables, and different laptops before committing to hating this product.
    The first time I reached out to Amazon, the Amazon rep gave me a Cisco number to call. Turns out, that's some shady mortgage refinance hotline. Try it for yourself! 1-800-666-1771.
    Now, the rant -
    1. Two out of four wired LAN ports don't work: What can be the fix for this?! The activity lights on ports 3 and 4 blink and suggest data transfer is taking place, but the wired laptop simply can't acquire an IP address and access the internet. Same result when I connect my Panasonic Blu-Ray player to ports 3 and 4. None of the Viera Cast features load.
    2. MAC filtering unreliable: The wireless routing works somewhat reliably, if and only if, one settles for the most basic security. If I only choose a password and WPA2 protocol, things work fine. If I add another layer of security (in my case, enabling MAC filtering and only PERMITTING gateway to listed MAC IDs), things break down. As soon as I disable MAC filtering, wireless access to authenticated clients is restored.
    3. Cisco customer service: The censored world we live in, compels me to criticize politely. TERRIBLE. Cisco website is unintuitive, and frustrating. There's no easy way to register your purchased product. The Cisco "registration" is intentionally misleading and deceptive. For all intents and purposes, it's just an information gathering tool for Cisco. Don't bother registering there, unless you love the idea of storing your personal information on their servers. Their phone-based customer service is apathetic and uninterested. My rep was so distrusting of my intelligence and motor control, that he simply wouldn't believe that I had selected "PERMIT" and not "PREVENT" as the option under MAC filtering. After he asked me the same question for the fourth time, I raised my voice, and he gave up the idea of checking for the fifth time.
    However, this review is a tale of two companies. I reached out to Amazon again. This time, I got a rockstar in the shape of Leanne C! She was incredibly helpful, and understanding. What's more, she set up my return without any hassle and this Cisco dud is on its way back. I'm a big fan of Leanne's and my confidence in Amazon is restored.
    I'm sure that i received a lemon. I've never had problems with Linksys products. Maybe others' experience is different from mine.

    In your case as port numbers 1 and 2 does not work, what you could have done a loop back test. To perform a loop back test you need to take an ethernet cable, connect one end of that cable to internet port and the other end to the non-working port on the router. If you get the led to glow on both internet and the respective ethernet port that indicates that the port is working fine.
    It could also be a sychronization issue between the above mentioned lan ports and the lan card of your computer. As a part of trouble shooting you can try to reduce the card speed of your lan card. Following are the steps to reduce the speed of your lan card.
    START--> right-click My Network Places and click Properties
    right-click on the device manager and click properties
    Click on the CONFIGURE button
    Select the ADVANCED tab and in the box under the header property select "speed and duplex" and change the value on the right to 10 mbps half duplex. A restart would be recommended after performing these steps.
    In the second half you said that after enabling the mac filter option the internet breaks down. Here, do you mean to say that the computer
    gets disconnected from the wireless network or it stays connected with a valid IP address but without an internet connection.
    Well, it is an unusual issue however you could have reset and reconfigure the router as you got the latest firmware upgraded on it.
    Steps to reset the router:
    Push the reset button on router for 30 seconds, turn off the router wait for 30 seconds and then power it on. Power light should blink when you perform the reset process.

  • Guest network and multiple VLANs

    Hello all,
    I have installed a pair of 5508 controllers in our network. One controller sits inside the network and APs are configured to associate with that controller. The second controller sits on a DMZ interface off the ASA. I have a guest network configured and it works great. I would like to configure additional guest networks at remote locations. Each guest WLAN will have it's own SSID. Is it possible to map all of these to the same VLAN? Or do I need a seperate VLAN and subnet for each SSID.
    Thanks

    Scott,
    Thanks for the reply. I have created different SSIDs and mapped them to the same VLAN. Everything looks good but I'm getting some strange behaviors on the new SSIDs. It appears that users don't authenticate but I've verified the credentials quite a few times. I wanted to make sure that you could map multiple SSIDs to the same VLAN before I continued troubleshooting.

  • HOW TO CONFIGURE GUEST NETWORK AND LIMITE BANDWIDTH

    Dear all,
    Please help me how to configure internet access rule and limited the bandwidth for guest network via TMG Forefront 2010.
    Thanks you & best regards,
    Hung Viet 

    Hi，
    First you can create the new network set which is mapped to guest subnet, after that you can create access rule for this network set.
    If you want to control bandwidth, you may need 3-party tool like this:http://www.bsplitter.com/
    Best Regards
    Quan Gu

  • Mobility groups and MAC filtering

    We have a 4402 controller and we are doing MAC filtering. We have reached the default number of MAC addresses, 512. It has been recommended that we add an additional controller instead of increasing this past the default. Three questions:
    1. Is there an increased (enough to impact performance) load placed on the WLC if the limit of MACs is increased, say to the max of 2048?
    2. If we add an additional controller, configured in a mobility group, how do we configure the MAC filter to load balance? Or do we have to configure the same MAC table on both controllers? Which leads to....
    3. Is there a benefit to adding another controller as far as MAC filtering is concerned?

    As it stands, you would need to manually replicate internal mac filtering database between two controllers, so you're not gaining much with the second controller. As regards to increasing database size and what effects it will have, I don't have an educated answer for you, sorry.
    Regards,
    Roman

  • Guest network and bridge mode

    Hi,
    my question is, why my guest network doesn't works, if my TimeCapsule works  in the bridge mode?
    Someone an idea?
    Thanks
    Albrun

    From the latest airport utility and firmware it does work.
    I run the TC in bridge and setup the guest to try it.. seems to work for me.
    I know there are other issues with using these .. perhaps that is what you mean.. but it does work.

  • Mac can't see new printer-told to Disable Airport Extreme Firewall and Mac Filtering...

    I have a new Epson WF-3520 AIO printer. I run Mac on OS X 10.5.7.  The printer appears to be properly set up to run wirelessly but it doesn't show up as a choice to be added to my list of available printers.  My Mac just doesn't see it.  After trying many things Epson's tech support told me to call Apple and find out how to disable the Airport Extreme's firewall as well as Mac Filtering.  I went into the Airport's utility and just got lost in knowing exactly what steps I need to take to do this.  Also, I'm somewhat dubious that this is really what needs to be done in the first place and I'm wondering if he simply wanted to get off the phone....  All advice welcome!  Thanks. Stephanie

    Forget it.... My suspicion was correct.  I was talking to an idiot.  Problem resolved by me.  Unrelated to Airport.
    Forgot to install a piece of software... duh!!!

  • WRT1900AC - WPA2 on Guest Network and Setting Domain Name

    I'm configuring a new WRT1900AC (version 1) and have a couple of questions.  The first should be easy, on the Connectivity -> Internet Settings page on the right side under the heading Optional the Domain Name (provided via the DHCP server, Comcast in this case) is displayed, but I cannot change it.  How do I set the Domain Name to reflect my local domain? The second question is a bit more daunting.  I have two main wifi segments (one each on 2.4Ghz and 5Ghz) that are each secured by WPA2.  They work great so far.  I also have two Guest wifi segments (one each on 2.4Ghz and 5Ghz), I cannot figure out how to secure these with WPA2.  You can set a passwword for each of the Guest wifi segments, and instruct users to open a web browser after connecting and enter this password, but that's not a secure connection.  Please tell me there is a way to secure the Guest network via WPA2, nobody wants to use an insecure internet connection in this day and age...... -MC

    That's exactly why you want the connection encrypted, so EVERYTHING you send is encrypted and not sniffable.  The intended use of this Guest network is for renters at a condo resort, who will likely be doing banking and the like while on vacation.  If we only provide an open/unencrypted network for them they can't (or at least shouldn't) use it. I have a Netgear R7500 in place right now, it doesn't have any of these problems (e.g. you can specify the domain name even on with a dynamic WAN IP, and all 4 network segments are WPA2 encrypted).  Unfortunately, it's totally unreliable - the 4 network segments randomely disappear and stop working all the time, and the signal range is poor.  I "downgraded" to this 1900AC because this router has a better reputation for stability and range (and indeed, I've been testing it for several days now and stability and range seem to be its strong points, not a single problem so far), but these firmware decisions by Linksys are forcing me to reconsider this router.  -MC

  • WAG54GS CD and MAC Filtering

    Hello,
    1)  Where can I obtain a Install CD for my WAG54GS Router?
    2) I have had the WAG54GS in use for some years now, and more and more computers and devices are to the router.
    Recently my Printer (HP 6500) often tells me that it cannot obtain an IP address  but it does t "see" the SSID Router name.)
    Error roughly translates (German) to
    Your Router uses MAC Filtering. So a Connection the HP Printer may fail.
    I must either deactivate the MAC filer or add the Printer MAC Address to the allowed list.
    I am unsure how to do this.
    Any help on both of these comments.??????
    NT

    OK, thank you.
    I keep losing IP addresses now fron my PC's as well a my printer. Usually a router re-boot helps.
    The thing  I did not like about this WAG54GS  is that there is no power fail re-start.
    Have you any idea why losing the IP address occurs. Note that the SSID is being recogonised and with a healthy
    signal level.
    However
    A am sending on Channel 1 but there is a TP-LINK 504132  Router in my neighbourhood that is on channel 1
      (2,412 GHz) and is sending 802.11n and seems to be tranmitting a much higher speed than me.
    I wonder if this could be causing problems.
    Regards

  • EA2700 bridging and mac filtering

    I have a EA4500 as a main router and a EA2700 router connected to it (wire) in bridging mode.
    On the EA4500 I use mac filtering for the wireless connections.
    My problem:
    If a device connects wireless to the EA2700, the EA4500 see this as a LAN connection and thus the MAC filter is bypassed.
    Can this be solved?

    You can try this, bridge the 2700 router and use the following LAN-to-LAN configuration to see if the 4500 sees the device correctly:
    http://www.northshore-it.com/tips/how-tos/cascade_linksys/#LAN_to_LAN
    It's possible that the design and detection behavior of the 4500 with the use of a wired 2ndary AP maybe how it's detecting the client devices since it's connected wirelessly to the 2700 however when it goes thru the 2700 to the 4500, it's over a LAN wired connection and thats what the 4500 is seeing. 

Maybe you are looking for