Lightweight AP authorization lists: Which AP MAC address to specifiy - AP Ethernet or AP Base Radio?

I'm trying to use the AP authorization list feature on a lightweight access point controller, and am hoping someone can clarify when specifying the MAC address of the AP along with the certificate type should the AP Ethernet MAC be used or the AP Base Radio MAC be used?

Ethernet MAC.

Similar Messages

Simple : Which src MAC address when WLC bridges 802.11to 802.3 ?

When a WLC bridges 802.11 to 802.3, after extracting the original 802.11 frame from LWAPP, does it put the 802.11 senders
MAC address as the source addr in the new 802.3 frame ?
Or does it put the WLC's AP manager interface ? (Or the WLC's Management Interface) ?
If you refer to :-
http://www.cisco.com/en/US/docs/wireless/technology/controller/deployment/guide/dep.html#wp1050985
One of the bullet points reads :-
After processing the 802.11 MAC header, the WLC extracts the payload (the IP packet from Host A), encapsulates it into an Ethernet frame, and then forwards the frame onto the appropriate wired network, typically adding an 802.1Q VLAN tag.
Should it include :-
and adds the MAC address of the Wireless client as the SOURCE MAC ADDRESS to the outgoing Ethernet Frame??
Also, will an ARP for a wireless client yeild the mac address of the WLC or the AP ???
Thanks

It looks like the src address of the original 802.11 client goes to the 802.3 frame as the source.
So am I correct in thinking that (in a flat topology, no L3 routing) the WLC will appear as to an attached switchport as trunk
(not necessarly 802.1q, but usually) with multiple mac address learned from it.
Any host on the LAN will send a packet for DEST MAC, which will eventually be SWITCHED (via L2 switching), upto the WLC.
The WLC will then send it over lwapp to the AP, and the AP will send it to the client.
But as far as the mac-address-table is concerned of any switch directly attached to the WLC, it will see
all client MAC address for ALL wireless stations for ALL AP's... Correct ?
Thanks

How to change the mac address of thunderbolt to ethernet adapter?

Hello everyone,
I am using Macbook pro retina display 2013 version. I have bought a thunderbolt to ethernet adapter in order to connect my Macbook to LAN. But in my area there is a shared line and I have to clone their mac address to my Macbolok. I could not change the mac address of my thunderbot to ethernet adapter. Can anyone please tell me how to change the mac address of thunderbot to ethernet adapter step by step??
Thanks in advance.

Open terminal and type the followings;
1) sudo ifconfig bridge0 ether xx:xx:xx:xx:xx:xx(it will be your new mac address)
2) Type your password to confirm
3) ifconfig bridge0 |grep ether (to see if change is successful)
PS: *This should with your thunderbolt adapter, but its not working usb to ethernet adapters without installing required drivers.
** You may need to do these steps every time you boot your mac.

Device in Linksys Smart Wi-Fi is listed with two MAC address - not correct.

I am using a EA4500 and use Linksys Smart Wi-Fi to manage the device. In the household we have multiple Apple i devices. Somehow the Linksys Smart Wi-Fi combined two separte i devices (iPhone 5 and a 4th generation iTouch) to one user.
The devices actually have different names, but the Smart Wi-Fi is combining them into one device. So I can't use Parental Controls on one of the devices.
I hope you can help me on this. We have made sure both devices have different names.
192.168.1.106
F01:A9:95:67:17
192.168.1.122
88:C6:63:B0:5F:88
Solved!
Go to Solution.

Before you decide to used the classic firmware, I would suggest that to try to manually add your TV under the DHCP reservation of the router's UI.

Allowing only a list of mac addresses to connect to the internet?

Hi,
I'm setting up a solution, where access to wireless internet is granted only to a list of mac addresses. It seems MAB security is what I am after. However, before mac address is allowed internet access, I want a user to go through an external and controller-independable registration page.
Consider this flow:
Clientconnects to WLAN, since it's mac address is not allowed, the user is redirected to an external website (http://registration.com, aspx website). Here I ask the user to register an account. Using ip address from the request, I send a CLI command to the WLC controller and learn client's mac address from arp table. Here I need to run another CLI command to add the mac address to the mac database, and inform the user they can access the web.
Few struggles that I'm having now:
1) How to setup web MAB authentication, that, upon failure, redirects the user to an external website?
2) How can I add (white-list?) a mac address to enable it access to the internet?

It seems I should be able to do this, can anyone elaborate?
1) Layer-2 set to Mac filtering only
2) Upon success - user is granted access
3) Upon failure, falls back to Extrenal Web Auth, which redirects the user to my custom web page
4) Upon registering, I make a postback to the action_url
5) User is authenticated? Is there a way to reset authentication sequence at step 4? I don't really want to register the user. During step 4, I'm sending user's mac address back to WLC via SSH. Since mac address will be present on the WLC after step 4, I would like it to just grant access to the mac address, rather than register the user.

Do I need to add Base Station MAC address to list?

Hi, If I choose to use MAC address filtering on my Airport Extreme Time Capsule, do I need to add the wireless MAC address of the Base Station to the list of allowed MAC addresses??? I'd feel real bad if I set up a list, didn't include the base station's MAC address and then could never get in to the network again because I, in effect, locked myself out??? I doubt that address needs to be included but I would like some feedback on that.
Second, does the one MAC address filter list apply to the Guest Network as well if I should choose to turn it on??? If that was the case, I would just turn off MAC address filtering why guests were present.
thanks.. bob

If I choose to use MAC address filtering on my Airport Extreme Time Capsule, do I need to add the wireless MAC address of the Base Station to the list of allowed MAC addresses???
No. Timed Access would be for wireless devices....computers, mobile devices, printer, etc., that are connecting to the Time Capsule. The Time Capsule does not connect to itself in this regard.
I'd feel real bad if I set up a list, didn't include the base station's MAC address and then could never get in to the network again because I, in effect, locked myself out???
Sometimes, users lock themselves out by mistake by entering incorrect times for devices to connect, and they often forget that they can connect to the base station using an Ethernet connection and get back in that way.....since Timed Access only applies to devices that connect using wireless.
does the one MAC address filter list apply to the Guest Network as well if I should choose to turn it on???
Yes

Mac-Address Different format for Authorization on Cisco ISE

Dear All,
I have problem with my Cisco ISE,
This is the design :
ISE ---- Core Switch ---- 3Com Switch --- PC User
My Case:
Authorization is based on Mac-address and Active Directory,
But user with PC that connect to 3Com swtich is Deny by ISE because the Format Mac-address is different with Cisco,
Mac-address Cisco format : XX:XX:XX:XX:XX:XX
Mac-address 3Com format : XXXX-XXXX-XXXX
3Com Switch type is TRICOM 4210 26-PORT.
Anyone have experience with this? and how change the mac-address format in 3Com so user can authorized by Cisco ISE.
note:
authorization based on Active Directory is not problem with 3Com Switch.
Based on my experience, Different product is different format mac-address, so this case not only for 3Com Switch.
Thanks,
Arika Wahyono

I do not think Cisco will add these vendors to the supported switch matrix because then it would be a support issue that cisco would have to deal with, much like most of the AD issues I experienced when I worked in TAC. Your best bet would be to run the evaluation license instance in a lab and have a 3com switch point against that.
Other than that I do not recommend upgrading to 1.2 without validating that the new "multi-vendor" MAB support will work on your switch.
PS- Keep in mind that my comments is just my opinion so you may need to open a TAC case for an official answer.
Tarik Admani
*Please rate helpful posts*

How to get MAC address list and HDD serial number from Windows and MAC machine?

Hi,
I'm developing a AIR application. I'm implementing the product key mechanishm. I need to identify the users' machines uniquely. I chose MAC address would be a better way. But a computer has list of MAC addresses including LAN card and Wi-Fi card addresses. So, I need to get the list of available MAC addresses from the computer and the Hard Disk Drive's serial number. HDD serial number would be helpful to cross verify the identity.
I'm able to get the MAC address using NetworkInfo class. But I need to get a list of available MAC addresses and HDD serial number.
Is there any classess to accomplish this task?
Thanks in advance.

See if this link can be of a little use to you.
http://www.adobe.com/devnet/air/flex/articles/retrieving_network_interfaces.html#ionComHea ding

Exporting MAC address list between AP

Hi
I'm trying to store a list of mac-address in my AP in order to export or import mac address from an AP to other.
I've been looking in the IOS AP commands a way to create a mac-address list but I haven't found anything
Is there any way to do it?
thanks

One solution is creating a access-list with following mac address and copy to all the APs.

E4200 losing mac address list at random

Hi,
I have a list of permitted mac addresses in my E4200.
On several occassions the list will lose some of the mac entries while retaining some.
This is getting frustrating.
Any one experiencing this problem? Any pointers on how to resolve the problem will be greatly appreciated.
Thanks.

Forget about the wireless mac filter. It does not provide any security. Use WPA2 with AES and a strong passphrase.

WCS 7.0 Vendor mac-address list

We are doing a study on our public WiFi to identfy client connections based on wireless Vendor. about 40-50% of the clients wireless Vendors are "unknown". Is there a way to update the list of Vendor mac-addresses in WCS?
Regards
Chris Kaufman

I doubt there will be any further releases of WCS code, as it's been EOL.
http://www.cisco.com/en/US/prod/collateral/wireless/ps5755/ps6301/ps6305/end_of_life_c51-556750.html
You would need to work a migration to NCS at this point.
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

MAC address blocking

Hi, need help on blocking a specific MAC address on an interface. On that interface it is cascaded to a hub.
Config# mac-address-table permanent aaab.000f.ffef e0/2
- is this the right command and can i list all the MAC address that is allowed to run? or there is a command to just block one MAC address and the rest is ok?
OR
Config# mac-address-table restricted static aaab.000f.ffef e0/2 e0/3
-almost the same as above but more restrictive

Which switch is this ?? What model number and the IOS version.
What I can think of is using 2 ways :
1 Configuring the MAC Acl and applying it to the same port but this block only non-ip traffic.
2. Configure port security and secure you addresses as static and give the number of max-counts the same the as number of amc you want to allow which are connected to hub.
regards,
-amit singh

Printer showing MAC address in sidebar

I have just setup a Canon MX850 printer on my home network and the MAC address of it is showing in the sidebar. The only way to remove it is to change the sidebar preferences which I don't want to do as I want to see other servers on the network. How do I change the printer settings to show the MX850 instead of the printers MAC address?

I have never seen this with any of my Canon printers. I have an iP5200R that is connected wirelessly to my network and an iP6000D that is connected to the USB port of an Airport Extreme. When I configured the iP5200R to join my wireless network, it was displayed in the Canon utility with its MAC address. Also, when I added its printer queue using More Printers > Canon IJ Network, the printer was also shown in the list with its MAC address. However, as I write this reply this printer does not display in any part of the Finder.
Is the printer displayed under the Shared section in the sidebar?
Also, how is the printer connected to your network? Is it being shared by another computer or is it connected via Ethernet or wireless?
PaHu

Finding the MAC address?

I need to assign fixed IPs to several computers on my mixed ethernet/wireless network. I notice that there are MANY MAC addresses on any given computer when examined by the profiler. Which profiler MAC address is the correct one to use?

I need to assign fixed IPs to several computers on my mixed ethernet/wireless network. I notice that there are MANY MAC addresses on any given computer when examined by the profiler. Which profiler MAC address is the correct one to use?
For devices connected by Ethernet, you would want to use the Built-in Ethernet Hardware (MAC) Address; for devices connected by AirPort, you would want to use the AirPort Hardware (MAC) Address as listed in the Systems Profiler.

WRT160N V3 router ignores MAC address Access Restrictions, Filtering policies

I have added a list of 2 MAC addresses in the Access Restrictions for the access policy #1 and enabled it with Allow policy. But one of my PC's MAC address which is not on the list of access policy #1 still can access the internet and ping websites. I tried to add a Deny policy in 2nd policy for this PC MAC address and then it can not ping websites anymore.
The problem is why my PC with a MAC address not on the list of Allow Policy #1 can access the internet? It seems the router Access Restrictions don't work well.

I've already added Deny rule (blocking all LAN IPs) to all computers accessing my network in Access Restrictions Policy #1 but I leave one PC left to access the router web configuration.
Then in Acess Restrictions Policy #2, I added an Allow rule to one of my PC's MAC addresses (and its IP too) but the PC can not access internet and ping websites. It looks like the allow rule in policy #2 doesn't overwrite the Deny rule in Policy #1.

Lightweight AP authorization lists: Which AP MAC address to specifiy - AP Ethernet or AP Base Radio?

Similar Messages

Maybe you are looking for