WLC 5760 - MAC Filtering wireless clients

Hi,
Does anyone ever deployed mac-filtering authentication to wireless clients in the WLC 5760?
I've configured a WLAN for Mac-filtering authentication only (named it as "macauth"):
wlan RNVDOS 4 RNVDOS
aaa-override
no broadcast-ssid
client vlan RNVDOS
mac-filtering macauth
no security wpa
no security wpa akm dot1x
no security wpa wpa2
no security wpa wpa2 ciphers aes
session-timeout 1800
no shutdown
Then, below Configuration->Security->MAC Filtering I've added several MAC addresses i.e. :
MAC Address: 88532e9ef70a Attribute List: macauth
Which turned out to be display in the CLI as:
username 88532e9ef70a mac aaa attribute list macauth
The problem is that whenever I try to associate the wireless client 88532e9ef70a, the client passes to the exclusion list.:
Sep 16 10:54:55.603: 8853.2E9E.F70A Adding mobile on LWAPP AP 0C68.03EA.4070 (1) 1 wcm: E9E.F70A (.t^GwtSessionID: 0afe01fbtQ^GwH^Cnz^Gw00dd) was added to ^G$h\225v^K
Sep 16 10:54:55.603: 8853.2E9E.F70A Creating WL station entry for client - rc 0 1 wcm:
Sep 16 10:54:55.603: 8853.2E9E.F70A Association received from mobile on AP 0C68.03EA.4070 1 wcm: (.t^GwtSessionID: 0afe01fbtQ^GwH^Cnz^Gw00dd) was added to ^G$h\225v^K
Sep 16 10:54:55.603: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: ssionID: 0afe01fbtQ^GwH^Cnz^Gw00dd) was added to ^G$h\225v^K
Sep 16 10:54:55.603: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw00dd) was added to ^G$h\225v^K
Sep 16 10:54:55.603: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm: ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:55.603: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm: 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:55.603: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
Sep 16 10:54:55.603: 8853.2E9E.F70A Applying site-specific IPv6 override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: ^G$h\225v^K
Sep 16 10:54:55.603: 8853.2E9E.F70A Applying local bridging Interface Policy for station 8853.2E9E.F70A - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
Sep 16 10:54:55.603: 8853.2E9E.F70A Applying site-specific override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
Sep 16 10:54:55.603: 8853.2E9E.F70A STA - rates (8): 1 wcm: 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
Sep 16 10:54:55.603: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
Sep 16 10:54:55.603: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Idle to AAA Pending
Sep 16 10:54:55.603: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 20) in 10 seconds
Sep 16 10:54:55.604: 8853.2E9E.F70A
client incoming attribute size are 0 1 wcm:   (callerId: 20) in 10 seconds
Sep 16 10:54:55.604: 8853.2E9E.F70A Sending Assoc Response to station on BSSID 0C68.03EA.4070 (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070 from Idle to AAA Pending
Sep 16 10:54:55.604: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from AAA Pending to Authenticated
Sep 16 10:54:55.604: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 18) in 10 seconds
Sep 16 10:54:55.813: 8853.2E9E.F70A Association received from mobile on AP 0C68.03EA.4070 1 wcm: n.t^Gwseconds
Sep 16 10:54:55.813: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
Sep 16 10:54:55.813: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw 0C68.03EA.4070 f^G$h\225v^K
Sep 16 10:54:55.813: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm: ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:55.813: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm: 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:55.813: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
Sep 16 10:54:55.813: 8853.2E9E.F70A Applying site-specific IPv6 override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: f^G$h\225v^K
Sep 16 10:54:55.813: 8853.2E9E.F70A Applying local bridging Interface Policy for station 8853.2E9E.F70A - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
Sep 16 10:54:55.813: 8853.2E9E.F70A Applying site-specific override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
Sep 16 10:54:55.813: 8853.2E9E.F70A STA - rates (8): 1 wcm: 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
Sep 16 10:54:55.813: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
Sep 16 10:54:55.813: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:55.813: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 20) in 10 seconds
Sep 16 10:54:55.814: 8853.2E9E.F70A
client incoming attribute size are 0 1 wcm:   (callerId: 20) in 10 seconds
Sep 16 10:54:55.814: 8853.2E9E.F70A Sending Assoc Response to station on BSSID 0C68.03EA.4070 (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:55.814: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from AAA Pending to Authenticated
Sep 16 10:54:55.814: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 18) in 10 seconds
Sep 16 10:54:56.520: 8853.2E9E.F70A Association received from mobile on AP 0C68.03EA.4070 1 wcm: n.t^Gwseconds
Sep 16 10:54:56.520: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
Sep 16 10:54:56.520: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw 0C68.03EA.4070 f^G$h\225v^K
Sep 16 10:54:56.520: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm: ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.520: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm: 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.520: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.520: 8853.2E9E.F70A Applying site-specific IPv6 override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: f^G$h\225v^K
Sep 16 10:54:56.520: 8853.2E9E.F70A Applying local bridging Interface Policy for station 8853.2E9E.F70A - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
Sep 16 10:54:56.520: 8853.2E9E.F70A Applying site-specific override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
Sep 16 10:54:56.520: 8853.2E9E.F70A STA - rates (8): 1 wcm: 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
Sep 16 10:54:56.520: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
Sep 16 10:54:56.520: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:56.520: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 20) in 10 seconds
Sep 16 10:54:56.521: 8853.2E9E.F70A
client incoming attribute size are 0 1 wcm:   (callerId: 20) in 10 seconds
Sep 16 10:54:56.521: 8853.2E9E.F70A Sending Assoc Response to station on BSSID 0C68.03EA.4070 (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:56.521: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from AAA Pending to Authenticated
Sep 16 10:54:56.521: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 18) in 10 seconds
Sep 16 10:54:56.729: 8853.2E9E.F70A Association received from mobile on AP 0C68.03EA.4070 1 wcm: n 10 seconds
Sep 16 10:54:56.729: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
Sep 16 10:54:56.729: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: A on AP 0C68.03EA.4070 from AAA Pending to Authenticated
Sep 16 10:54:56.729: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm: ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.729: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm: 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.729: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.729: 8853.2E9E.F70A Applying site-specific IPv6 override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: from AAA Pending to Authenticated
Sep 16 10:54:56.729: 8853.2E9E.F70A Applying local bridging Interface Policy for station 8853.2E9E.F70A - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
Sep 16 10:54:56.729: 8853.2E9E.F70A Applying site-specific override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
Sep 16 10:54:56.729: 8853.2E9E.F70A STA - rates (8): 1 wcm: 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
Sep 16 10:54:56.729: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
Sep 16 10:54:56.729: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:56.729: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 20) in 10 seconds
Sep 16 10:54:56.730: 8853.2E9E.F70A
client incoming attribute size are 0 1 wcm:   (callerId: 20) in 10 seconds
Sep 16 10:54:56.730: 8853.2E9E.F70A Sending Assoc Response to station on BSSID 0C68.03EA.4070 (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:56.730: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from AAA Pending to Authenticated
Sep 16 10:54:56.730: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 18) in 10 seconds
Sep 16 10:54:56.937: 8853.2E9E.F70A Association received from mobile on AP 0C68.03EA.4070 1 wcm: n.t^Gwseconds
Sep 16 10:54:56.937: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
Sep 16 10:54:56.937: 8853.2E9E.F70A apChanged 0 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw 0C68.03EA.4070 f^G$h\225v^K
Sep 16 10:54:56.937: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm: ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.937: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm: 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.937: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
Sep 16 10:54:56.937: 8853.2E9E.F70A Applying site-specific IPv6 override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: f^G$h\225v^K
Sep 16 10:54:56.937: 8853.2E9E.F70A Applying local bridging Interface Policy for station 8853.2E9E.F70A - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
Sep 16 10:54:56.937: 8853.2E9E.F70A Applying site-specific override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
Sep 16 10:54:56.937: 8853.2E9E.F70A STA - rates (8): 1 wcm: 140 18 152 36 176 72 96 108 0 0 0 0 0 0 0 0
Sep 16 10:54:56.937: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: - vapId 4, site 'renova', interface 'RNVDOS'
Sep 16 10:54:56.937: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:56.937: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 20) in 10 seconds
Sep 16 10:54:56.937: 8853.2E9E.F70A
client incoming attribute size are 0 1 wcm:   (callerId: 20) in 10 seconds
Sep 16 10:54:56.937: 8853.2E9E.F70A Sending Assoc Response to station on BSSID 0C68.03EA.4070 (status 256) ApVapId 2 Slot 1 1 wcm: 68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:56.937: 8853.2E9E.F70A apfProcessRadiusAssocResp (apf_80211.c: 1 wcm: 2149) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from AAA Pending to Authenticated
Sep 16 10:54:56.937: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 18) in 10 seconds
Sep 16 10:54:57.143: 8853.2E9E.F70A Association received from mobile on AP 0C68.03EA.4070 1 wcm: n.t^Gwseconds
Sep 16 10:54:57.143: 8853.2E9E.F70A qos upstream policy is unknown and downstream policy is unknown 1 wcm: onds
Sep 16 10:54:57.143: 8853.2E9E.F70A apChanged 1 wlanChanged 0 mscb ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0 1 wcm: H^Cnz^Gw 0C68.03EA.4070 f^G$h\225v^K
Sep 16 10:54:57.143: 8853.2E9E.F70A Applying WLAN policy on MSCB. 1 wcm: ipAddr 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:57.143: 8853.2E9E.F70A Applying WLAN ACL policies to client 1 wcm: 0.0.0.0, apf RadiusOverride 0x0, numIPv6Addr=0
Sep 16 10:54:57.143: 8853.2E9E.F70A No Interface ACL used for Wireless client in WCM(NGWC) 1 wcm: usOverride 0x0, numIPv6Addr=0
Sep 16 10:54:57.143: 8853.2E9E.F70A Applying site-specific IPv6 override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: f^G$h\225v^K
Sep 16 10:54:57.143: 8853.2E9E.F70A Applying local bridging Interface Policy for station 8853.2E9E.F70A - vlan 4, interface 'RNVDOS' 1 wcm: ce 'RNVDOS'
Sep 16 10:54:57.143: 8853.2E9E.F70A Applying site-specific override for station 8853.2E9E.F70A - vapId 4, site 'renova', interface 'RNVDOS' 1 wcm: DOS'
Sep 16 10:54:57.143: 8853.2E9E.F70A STA - rates (8): 1 wcm: 130 132 139 150 12 18 24 36 0 0 0 0 0 0 0 0
Sep 16 10:54:57.143: 8853.2E9E.F70A STA - rates (12): 1 wcm: 130 132 139 150 12 18 24 36 48 72 96 108 0 0 0 0
Sep 16 10:54:57.144: 8853.2E9E.F70A 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [ 0C68.03EA.4070 ] 1 wcm: site 'renova', interface 'RNVDOS'
Sep 16 10:54:57.144: 8853.2E9E.F70A Updated location for station old AP 0C68.03EA.4070 -1, new AP 0C68.03EA.4070 -0 1 wcm: va', interface 'RNVDOS'
Sep 16 10:54:57.144: 8853.2E9E.F70A new capwap_wtp_iif_id a45d40000000a5, sm capwap_wtp_iif_id 0 1 wcm: P 0C68.03EA.4070 -0
Sep 16 10:54:57.144: 8853.2E9E.F70A apfProcessAssocReq (apf_80211.c: 1 wcm: 5137) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:57.144: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 20) in 10 seconds
Sep 16 10:54:57.144: 8853.2E9E.F70A
client incoming attribute size are 0 1 wcm:   (callerId: 20) in 10 seconds
Sep 16 10:54:57.145: 8853.2E9E.F70A Sending Assoc Response to station on BSSID 0C68.03EA.4070 (status 256) ApVapId 2 Slot 0 1 wcm: 68.03EA.4070 from Authenticated to AAA Pending
Sep 16 10:54:57.145: 8853.2E9E.F70A apfBlacklistMobileStationEntry2 (apf_ms.c: 1 wcm: 6129) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from AAA Pending to Exclusion-list (1)
Sep 16 10:54:57.145: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 44) in 10 seconds
Sep 16 10:54:57.145: 8853.2E9E.F70A client is added to the exclusion list, reason 1 1 wcm: d: 44) in 10 seconds
Sep 16 10:54:57.145: *apfReceiveTask: 1 wcm: %APF-4-ADD_TO_BLACKLIST_REASON: Client 8853.2E9E.F70A (AuditSessionID: 0afe01fb5236e37f000000de) was added to exclusion list. Reason: 802.11 association failure
Sep 16 10:54:57.836: 8853.2E9E.F70A Ignoring assoc request due to mobile in exclusion list or marked for deletion 1 wcm: fbtQ^GwH^Cnz^Gw00de) was added to ^G$h\225v^K
Sep 16 10:54:58.533: 8853.2E9E.F70A Ignoring assoc request due to mobile in exclusion list or marked for deletion 1 wcm: fbtQ^GwH^Cnz^Gw00de) was added to ^G$h\225v^K
Sep 16 10:54:59.231: 8853.2E9E.F70A Ignoring assoc request due to mobile in exclusion list or marked for deletion 1 wcm: fbtQ^GwH^Cnz^Gw00de) was added to ^G$h\225v^K
Sep 16 10:54:59.922: 8853.2E9E.F70A Ignoring assoc request due to mobile in exclusion list or marked for deletion 1 wcm: fbtQ^GwH^Cnz^Gw00de) was added to ^G$h\225v^K
Sep 16 10:55:06.972: 8853.2E9E.F70A apfMsExpireCallback (apf_ms.c: 1 wcm: 664) Expiring Mobile!
Sep 16 10:55:06.972: 8853.2E9E.F70A Scheduling deletion of Mobile Station: 1 wcm:   (callerId: 46) in 60 seconds
Sep 16 10:55:06.972: 8853.2E9E.F70A apfMsExpireMobileStation (apf_ms.c: 1 wcm: 7067) Changing state for mobile 8853.2E9E.F70A on AP 0C68.03EA.4070 from Exclusion-list (1) to Exclusion-list (2)
Sep 16 10:55:06.972: 8853.2E9E.F70A 0.0.0.0 START (0) Deleted mobile LWAPP rule on AP [ 0C68.03EA.4070 ] 1 wcm: 3.2E9E.F70A on AP 0C68.03EA.4070 from Exclusion-list (1) to Exclusion-list (2)
Sep 16 10:55:06.972: 8853.2E9E.F70A 0.0.0.0 START (0) FastSSID for the client [ 0C68.03EA.4070 ] NOTENABLED 1 wcm: E9E.F70A on AP 0C68.03EA.4070 from Exclusion-list (1) to Exclusion-list (2)
Sep 16 10:55:06.972: 8853.2E9E.F70A Incrementing the Reassociation Count 1 for client (of interface RNVDOS) 1 wcm: D
Sep 16 10:55:06.972: 8853.2E9E.F70A Clearing Dhcp state for station --- 1 wcm: for client (of interface RNVDOS)
WLC1#
WLC1#
Kind Regards,
Vasco

Hi Patrick,
Thank you for sharing your solution. It didn't solved entirely the problem but you pointed to the right direction!
They are caused, because the system searches for an aaa authorization list, which is not configured.
To resolve this configure the following
aaa authorization network mac-filter local
where mac-filter is the name you defined in the SSID.
I've used your sugestion to create an aaa local authorization list but instead of naming it with the SSID, I've used the name of the attribute list ( macauth ) and it solved the problem:
aaa authorization network macauth local
username 88532e9ef70a mac aaa attribute list macauth
wlan RNVDOS 4 RNVDOS
client vlan RNVDOS
mac-filtering macauth
WLC1#sh wireless client summ
Number of Local Clients : 1
MAC Address AP Name WLAN State Protocol
8853.2e9e.f70a APf872.ead7.31da 4 UP 11n(5)
Cheers,
Vasco

Similar Messages

WLC 5760; bloated output on client debug

Hi all,
recently I tried to debug a client on the 5760 WLC. When I entered the debug client mac <MAC_addr> command the WLC immediately started to throw WCM related debug outputs which did not have anything to do with the client debugging itself. It made it virtually impossible to do a real-time analysis when those messages obfuscate the truly necessary ones.
For reference those are the debug switches, which are enabled when doing client debug mac
Nova Platform:
        dot11/state debugging is on
        pem/events debugging is on
        ft/events debugging is on
        client/mac-addr debugging is on
        dot11/detail debugging is on
        mac/ filters[string 1234.5678.9ab] debugging is on
        dot11/error debugging is on
        dot11/mobile debugging is on
        pem/state debugging is on
I think it started, when we did the upgrade of all WLCs from 03.02 to 03.03, because those are the same switches, which were enabled before and where I did not see those messages.
Here is an example of the bloat:
Jan 21 08:53:37 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_1> AP: <RND_AP_MAC_1> -00 thread:-114267280
Jan 21 08:53:37 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_1> AP: <RND_AP_MAC_1> -00 thread:-114267280
Jan 21 08:53:37 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:37 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_2> AP: <RND_AP_MAC_2> -00 thread:-114267280
Jan 21 08:53:37 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:37 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_2> AP: <RND_AP_MAC_2> -00 thread:-114267280
Jan 21 08:53:37 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:37 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:37 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:37 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: LLM-SPI: local handle: d000016, remote handle:83000007, group handle: cc000006
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: LLM-SPI: Sent LLM client Add to FED.
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_3> AP: <RND_AP_MAC_3> -00 thread:-114268168
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_3> AP: <RND_AP_MAC_3> -00 thread:-114268168
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Epm spi response(12)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: EPM: Session create resp - client handle 49be00000930ac session 7d010ca7
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: EPM: Netflow session create resp - client handle 49be00000930ac sess 7d010ca7
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Epm spi response(12)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: EPM: Init feature, client handle 49be00000930ac session 7d010ca7 authz 9a06002f
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: EPM: Activate feature client handle 49be00000930ac sess 7d010ca7 authz 9a06002f
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Epm spi response(12)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_4> AP: <RND_AP_MAC_4> -00 thread:-114267280
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_4> AP: <RND_AP_MAC_4> -00 thread:-114267280
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: EPM: Policy enforcement - client handle 49be00000930ac session ba020080 authz 9a06002f
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: EPM: Netflow policy enforcement - client handle 49be00000930ac sess ba020080 authz 9a06002f msg_type 0 policy_status 0 attr len 0
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Epm spi response(12)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: WCDB_IIF: Ack Message ID: 0x7f5c0000092c50 code 1003
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_5> AP: <RND_AP_MAC_5> -00 thread:-114268168
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Load Balancer: Success, Resource allocated are: Active Switch number: 1, Active Asic number : 2, Reserve Switch number 2 Reserve Asic number 2. AP Asic num 1
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_5> AP: <RND_AP_MAC_5> -00 thread:-114268168
Jan 21 08:53:38 UTC: %IOSXE-7-PLATFORM: 1 process wcm: WCDB_IIF: Ack Message ID: 0x61cf40000930ae code 1001
Jan 21 08:53:39 UTC: %IOSXE-7-PLATFORM: 1 process wcm: LLM-SPI: local handle: d000016, remote handle:83000007, group handle: cc000006
Jan 21 08:53:39 UTC: %IOSXE-7-PLATFORM: 1 process wcm: LLM-SPI: Sent LLM client Add to FED.
Jan 21 08:53:39 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:39 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:39 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_6> AP: <RND_AP_MAC_6> -00 thread:-114267280
Jan 21 08:53:39 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_6> AP: <RND_AP_MAC_6> -00 thread:-114267280
Jan 21 08:53:40 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_3> AP: <RND_AP_MAC_7> -00 thread:-114267280
Jan 21 08:53:40 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_3> AP: <RND_AP_MAC_7> -00 thread:-114267280
Jan 21 08:53:40 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_7> AP: <RND_AP_MAC_8> -00 thread:-114268168
Jan 21 08:53:40 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Load Balancer: Success, Resource allocated are: Active Switch number: 1, Active Asic number : 1, Reserve Switch number 2 Reserve Asic number 1. AP Asic num 1
Jan 21 08:53:40 UTC: %IOSXE-7-PLATFORM: 1 process wcm: WCDB_IIF: Ack Message ID: 0x782ac0000930af code 1001
Jan 21 08:53:40 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_7> AP: <RND_AP_MAC_8> -00 thread:-114268168
Jan 21 08:53:40 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_8> AP: <RND_AP_MAC_9> -00 thread:-114268168
Jan 21 08:53:41 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_8> AP: <RND_AP_MAC_9> -00 thread:-114268168
Jan 21 08:53:41 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:41 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_8> AP: <RND_AP_MAC_9> -00 thread:-114268168
Jan 21 08:53:41 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:41 UTC: %IOSXE-7-PLATFORM: 1 process wcm: WCDB_IIF: Ack Message ID: 0x4c740000092b7a code 1003
Jan 21 08:53:41 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:41 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:41 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_9> AP: <RND_AP_MAC_10> -00 thread:-114268168
Jan 21 08:53:41 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:41 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_9> AP: <RND_AP_MAC_10> -00 thread:-114268168
Jan 21 08:53:41 UTC: %IOSXE-7-PLATFORM: 1 process wcm: WCDB_IIF: Ack Message ID: 0x65088000093055 code 1003
Jan 21 08:53:41 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:41 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_10> AP: <RND_AP_MAC_11> -01 thread:-114267280
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_10> AP: <RND_AP_MAC_11> -01 thread:-114267280
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_11> AP: <RND_AP_MAC_12> -00 thread:-114268168
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_11> AP: <RND_AP_MAC_12> -00 thread:-114268168
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_12> AP: <RND_AP_MAC_13> -00 thread:-114267280
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_12> AP: <RND_AP_MAC_13> -00 thread:-114267280
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_13> AP: <RND_AP_MAC_13> -00 thread:-114267280
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_13> AP: <RND_AP_MAC_13> -00 thread:-114267280
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_14> AP: <RND_AP_MAC_14> -01 thread:-114268168
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_14> AP: <RND_AP_MAC_14> -01 thread:-114268168
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: LLM-SPI: local handle: d000016, remote handle:83000007, group handle: cc000006
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: LLM-SPI: Sent LLM client Add to FED.
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: LLM-SPI: local handle: d000016, remote handle:83000007, group handle: cc000006
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: LLM-SPI: Sent LLM client Add to FED.
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_15> AP: <RND_AP_MAC_15> -00 thread:-114267280
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_15> AP: <RND_AP_MAC_15> -00 thread:-114267280
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_15> AP: <RND_AP_MAC_15> -00 thread:-114267280
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_16> AP: <RND_AP_MAC_16> -01 thread:-114268168
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_16> AP: <RND_AP_MAC_16> -01 thread:-114268168
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Add SCB(3)
Jan 21 08:53:42 UTC: %IOSXE-7-PLATFORM: 1 process wcm: WCDB_IIF: Ack Message ID: 0x56eac000092f60 code 1003
Jan 21 08:53:43 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Processing assoc-req station: <RND_Client_MAC_17> AP: <RND_AP_MAC_13> -00 thread:-114267280
Jan 21 08:53:43 UTC: %IOSXE-7-PLATFORM: 1 process wcm: PEM recv processing msg Del SCB(4)
Jan 21 08:53:43 UTC: %IOSXE-7-PLATFORM: 1 process wcm: Sending assoc-resp station: <RND_Client_MAC_17> AP: <RND_AP_MAC_13> -00 thread:-114267280
Does anyone know how to filter them out?
Best Regards,
Patrick

After checking on each single debug together with the client mac filter it apparently seems the latter is not working and thus shows the debug for all connected clients.
Regards,
Patrick

Wlc 2006 mac filtering

I would like to allow client to access wireless lan based on the client mac-address.
How I config it on WLC 2006 locally (not using radius server)? If yes, How mnay mac-address can be configured on the wlc2006?
Thanks.
Douglas

Hi Douglas,
Just wanted to add a note to Ankurs good info;
Maximum MAC Filter Entries
The controller database can contain up to 2048 MAC filter entries for local netusers. The default value is 512. To support up to 2048 entries, you must enter this command in the controller CLI:
config database size MAC_filter_entry
where MAC_filter_entry is a value from 512 to 2048.
From this good doc;
http://www.cisco.com/en/US/products/ps6366/prod_release_note09186a0080813b1c.html#wp42756
MAC Filtering
http://www.cisco.com/en/US/products/ps6366/products_user_guide_chapter09186a00805a6ad0.html#wp1040588
Hope this helps!
Rob

Cisco WLC 5508 Mac Filtering

Hi Group, how are you?.
I know as Mac filtering feature works, but I need the opposite. I need to filter some mac-address to a particular SSID and permit all the other mac-address.
Please, has anyone any ideas?.
Thanks.
Andrés.

Hi Andres,
I think stephan was talking about vlan based access control via RADIUS:
check this document:
http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_technical_reference09186a00801444a1.html
Regards
Dont forget to rate helpful posts

About max local MAC filtering can be register in WLC 2504 and 5508

Hi all
My customer is considering to use WLC with MAC filtering feature (use local database not external Radius). So they are concerning about maximum local MAC filtering entries that can be register on WLC2504 and WLC5508 to buy (the number of APs is about 20, but the MAC is more than 200)
I tried to search, but I could not find any specs mention it. If anyone knows, please help to answer
Rgds

I looked at this before. I want to say its maxed at 2048 regardless of the model ..
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/91901-mac-filters-wlcs-config.html

WLC MAC Filtering

Hello
One thing I am confused is if I set MAC filtering on a WLC but do not populate with any MAC addresses will it block all MAC addresses or allow all?
Anyone can advise on this or please share information?
Thanks

When the database is empty then it will block all:
MAC Address Filter (MAC Authentication) on WLCs
When you create a MAC address filter on WLCs, users are granted or denied access to the WLAN network based on the MAC address of the client they use.
There are two types of MAC authentication that are supported on WLCs:
Local MAC authentication
MAC authentication using a RADIUS server
With local MAC authentication, user MAC addresses are stored in a database on the WLC. When a user tries to access the WLAN that is configured for MAC filtering, the client MAC address is validated against the local database on the WLC, and the client is granted access to the WLAN if the authentication is successful.
By default, the WLC local database supports up to 512 user entries.
The local user database is limited to a maximum of 2048 entries. The local database stores entries for these items:
Local management users, which includes lobby ambassadors
Local network users, which includes guest users
MAC filter entries
Exclusion list entries
Access point authorization list entries
Together, all of these types of users cannot exceed the configured database size.
In order to increase the local database, use this command from the CLI:
<Cisco Controller>config database size ?
<count> Enter the maximum number of entries (512-2048)
Alternatively, MAC address authentication can also be performed using a RADIUS server. The only difference is that the users MAC address database is stored in the RADIUS server instead of the WLC. When a user database is stored on a RADIUS server the WLC forwards the MAC address of the client to the RADIUS server for client validation. Then, the RADIUS server validates the MAC address based on the database it has. If the client authentication is successful, the client is granted access to the WLAN. Any RADIUS server which supports MAC address authentication can be used.

Cisco 3850 WLC mac-filtering

Hi:
Cisco 3850 in WLC how to config mac-filtering
thanks

When you create a MAC address filter on WLCs, users are granted or       denied access to the WLAN network based on the MAC address of the client they       use.
There are two types of MAC authentication that are supported on       WLCs:
Local MAC authentication
MAC authentication using a RADIUS           server
With local MAC authentication, user MAC addresses are stored in a       database on the WLC. When a user tries to access the WLAN that is configured       for MAC filtering, the client MAC address is validated against the local       database on the WLC, and the client is granted access to the WLAN if the       authentication is successful.
By default, the WLC local database supports up to 512 user entries.
The local user database is limited to a maximum of 2048 entries. The       local database stores entries for these items:
Local management users, which includes lobby           ambassadors
Local network users, which includes guest users
MAC filter entries
Exclusion list entries
Access point authorization list           entries
Together, all of these types of users cannot exceed the configured       database size.
To Know how to configure Mac filtering please go to the below link.
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008084f13b.shtml

E1200 - Ports not working and mac filtering problem

If there was a way to give negative stars to this router, I would. As it is, the minimum rating I can give this product is one star, and that's one star too many.
I was upgrading from the WRT54G, which is an ugly thing to look at, but a reliable workhorse nonetheless. I turned that in to a downstream switch in my comms hub.
On the E1200, I flashed the latest firmware, used different Cat5 cables, and different laptops before committing to hating this product.
The first time I reached out to Amazon, the Amazon rep gave me a Cisco number to call. Turns out, that's some shady mortgage refinance hotline. Try it for yourself! 1-800-666-1771.
Now, the rant -
1. Two out of four wired LAN ports don't work: What can be the fix for this?! The activity lights on ports 3 and 4 blink and suggest data transfer is taking place, but the wired laptop simply can't acquire an IP address and access the internet. Same result when I connect my Panasonic Blu-Ray player to ports 3 and 4. None of the Viera Cast features load.
2. MAC filtering unreliable: The wireless routing works somewhat reliably, if and only if, one settles for the most basic security. If I only choose a password and WPA2 protocol, things work fine. If I add another layer of security (in my case, enabling MAC filtering and only PERMITTING gateway to listed MAC IDs), things break down. As soon as I disable MAC filtering, wireless access to authenticated clients is restored.
3. Cisco customer service: The censored world we live in, compels me to criticize politely. TERRIBLE. Cisco website is unintuitive, and frustrating. There's no easy way to register your purchased product. The Cisco "registration" is intentionally misleading and deceptive. For all intents and purposes, it's just an information gathering tool for Cisco. Don't bother registering there, unless you love the idea of storing your personal information on their servers. Their phone-based customer service is apathetic and uninterested. My rep was so distrusting of my intelligence and motor control, that he simply wouldn't believe that I had selected "PERMIT" and not "PREVENT" as the option under MAC filtering. After he asked me the same question for the fourth time, I raised my voice, and he gave up the idea of checking for the fifth time.
However, this review is a tale of two companies. I reached out to Amazon again. This time, I got a rockstar in the shape of Leanne C! She was incredibly helpful, and understanding. What's more, she set up my return without any hassle and this Cisco dud is on its way back. I'm a big fan of Leanne's and my confidence in Amazon is restored.
I'm sure that i received a lemon. I've never had problems with Linksys products. Maybe others' experience is different from mine.

In your case as port numbers 1 and 2 does not work, what you could have done a loop back test. To perform a loop back test you need to take an ethernet cable, connect one end of that cable to internet port and the other end to the non-working port on the router. If you get the led to glow on both internet and the respective ethernet port that indicates that the port is working fine.
It could also be a sychronization issue between the above mentioned lan ports and the lan card of your computer. As a part of trouble shooting you can try to reduce the card speed of your lan card. Following are the steps to reduce the speed of your lan card.
START--> right-click My Network Places and click Properties
right-click on the device manager and click properties
Click on the CONFIGURE button
Select the ADVANCED tab and in the box under the header property select "speed and duplex" and change the value on the right to 10 mbps half duplex. A restart would be recommended after performing these steps.
In the second half you said that after enabling the mac filter option the internet breaks down. Here, do you mean to say that the computer
gets disconnected from the wireless network or it stays connected with a valid IP address but without an internet connection.
Well, it is an unusual issue however you could have reset and reconfigure the router as you got the latest firmware upgraded on it.
Steps to reset the router:
Push the reset button on router for 30 seconds, turn off the router wait for 30 seconds and then power it on. Power light should blink when you perform the reset process.

Imac internet sharing ethernet - time capsule - wireless client use imac

hi all,
i have the following setup in mind:
a g5 imac with 3g modem attached and internet sharing (3g/ethernet) switched on. with an ethernet cable it is connected to a time capsule. through the wireless option of the time capsule i want to be able to use the imacs internet sharing with two macbooks - its not working ....
imac: g5, no wireless, os 10.5
macbook: wireless, os 10.4
macbook pro: wireless, os 10.6
what went wrong? how to set up the time capsule to allow the internet sharing coming from a wired mac to wireless clients macbooks?
or is this not working at all???

If you configure your Mac to share an ethernet internet connection over AirPort, your G-devices should have no problem connecting. We do it here with iPods and an iPhone, they are G.
My Mac mini is connected to the internet by Ethernet cable to my ISP's Arris gateway. I am sharing the Ethernet connection to two iPod Touches and an iPhone via AirPort from my Mac mini. This is how I configured the Mac to share the connection;
1. In Sys Prefs/Sharing I highlighted Internet Sharing (do not check the box)
2. Share your connection from: Ethernet (from the dropdown menu)
3. To computers using: AirPort (check the little box)
4. Press the button AirPort Options...
5. Name your Network
6. I use Automatic for the channel
7. I encrypt my network using a 40-bit WEP key
8. *For a non-Apple device you must use only a 5 alphanumeric character, 40-bit WEP password or only a 13 alphanumeric character 128-bit WEP password*
9. Press OK
10. Check the box for Internet Sharing
11. Answer any dialog boxes that pop up
Dah•veed

WLC 5760 multiple SSIDs with MAC filtering

Dear All,
I am implementing a wireless network with 5760 WLCs. The client requires a few SSIDs with MAC-based authentication. So I created different MAC filters using the commands "aaa authorization network MAC_FILTER01 local", "aaa authorization network MAC_FILTER02 local" etc
These filters are bound to different SSIDs using the commands "mac-filtering MAC_FILTER01" "mac-filtering MAC_FILTER02" etc. and users are added to their required MAC filters using the commands "username <mac-address> mac aaa attribute list MAC_FILTER01", "username <mac-address> mac aaa attribute list MAC_FILTER02" etc.
Now I am facing a serious issue - users belonging to any one MAC filter can connect to the all SSIDs. It seems like the MAC addresses added to the controller under different filter names are going to a common database, thereby providing access to users to all SSIDs irrespective of their MAC filter.
Is it a limitation of local database of 5760? Has anyone faced the same issue? How can I implement independent MAC filters bound to different SSIDs?
Thanks,
Arun John

Hi Arun,
this feature currently does not exist on the 5760. it is due to release in one of the MR's of 3.6
-Joseph

WLC 5760 - show client ccx roam-history

Hi,
We're running an WLC 5760 with the latests version (3.3.1). We have several wlans, with diferent authentication methods, and they are all working fine.
However we noticed that the roaming is working correctly but no information is displayed if the "show ccx roam-history".
WLC1#sh wireless client mac-address 8853.2e9e.f70a det | i CCX
Client CCX version : 4
WLC1#debug dot11 ccx-roam all
Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Mobile 8853.2e9e.f70a associated
Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Sending Neighbor List packet to Mobile 8853.2e9e.f70a
Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Sending L2Roam Packet to mobile 8853.2e9e.f70a
Dec 12 17:11:40.963: 00000000: 1 wcm: 01 1a 33 81 88 53 2e 9e f7 0a c0 25 5c 68 50 50 ..3..S.....%\hPP
Dec 12 17:11:40.963: 00000010: 1 wcm: 28 11 c0 25 5c 68 50 50 01 00 02 01 06 ab 0d 0d (..%\hPP........
Dec 12 17:11:40.963: 00000020: 1 wcm: 03 b8 05 28 11 c0 25 5c ec 05 a0 0b 00 07 01 06 ...(..%\........
Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 00000030: ab 0d 0d 03 b8 05 28 11 0c 68 03 ea 52 10 06 00 ......(..h..R...
Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 00000040: 07 01 06 ab 0d 0d 03 b8 05 28 11 0c 68 03 d6 e4 .........(..h...
Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 00000050: 00 0b 00 07 01 06 ab 0d 0d 03 b8 05 28 11 0c 68 ............(..h
Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 00000060: 03 4d d0 60 01 00 07 01 06 ab 0d 0d 03 b8 05 28 .M.`...........(
Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 00000070: 11 0c 68 03 ea 40 70 01 00 07 01 06 ab 0d 0d 03 ..h..@p.........
Dec 12 17:11:40.963: %IOSXE-7-PLATFORM: 1 process wcm: 00000080: b8 05 28 11 0c 68 03 ea 4b 10 01 00 07 01 06 ab ..(..h..K.......
Dec 12 17:11:40.963: 00000090: 1 wcm: 0d 0d 03 b8 05 28 11 c0 25 5c 68 50 5f 3c 01 04 .....(..%\hP_<..
Dec 12 17:11:40.964: 000000a0: 1 wcm: 01 06 ab 12 12 03 b8 05 28 11 c0 25 5c ec 05 af ........(..%\...
Dec 12 17:11:40.964: %IOSXE-7-PLATFORM: 1 process wcm: 000000b0: 24 01 07 01 06 ab 12 12 03 b8 05 28 11 0c 68 03 $..........(..h.
Dec 12 17:11:40.964: %IOSXE-7-PLATFORM: 1 process wcm: 000000c0: ea 52 1f 24 01 07 01 06 ab 12 12 03 b8 05 28 11 .R.$..........(.
Dec 12 17:11:40.964: %IOSXE-7-PLATFORM: 1 process wcm: 000000d0: 0c 68 03 ea 4b 1f 38 01 07 01 06 ab 12 12 03 b8 .h..K.8.........
Dec 12 17:11:40.964: %IOSXE-7-PLATFORM: 1 process wcm: 000000e0: 05 28 11 0c 68 03 d6 e4 0f 38 01 07 01 06 ab 12 .(..h....8......
Dec 12 17:11:40.964: 000000f0: 1 wcm: 12 03 b8 05 28 11 c0 25 5c a3 f4 8f 30 01 07 01 ....(..%\...0...
WLC1#
Dec 12 17:11:40.964: %IOSXE-7-PLATFORM: 1 process wcm: 00000100: 06 ab 12 12 03 b8 05 28 11 0c 68 03 ea 40 7f 30 .......([email protected]
Dec 12 17:11:40.964: %IOSXE-7-PLATFORM: 1 process wcm: 00000110: 01 07 01 06 ab 12 12 03 b8 05                    ..........
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Received Neighbor List Request from Mobile 8853.2e9e.f70a
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Sending Neighbor List packet to Mobile 8853.2e9e.f70a
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Sending L2Roam Packet to mobile 8853.2e9e.f70a
Dec 12 17:12:51.006: 00000000: 1 wcm: 01 1a 33 81 88 53 2e 9e f7 0a c0 25 5c 68 50 50 ..3..S.....%\hPP
Dec 12 17:12:51.006: 00000010: 1 wcm: 28 11 c0 25 5c 68 50 50 01 00 02 01 06 ab 0d 0d (..%\hPP........
Dec 12 17:12:51.006: 00000020: 1 wcm: 03 b8 05 28 11 c0 25 5c ec 05 a0 0b 00 07 01 06 ...(..%\........
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000030: ab 0d 0d 03 b8 05 28 11 0c 68 03 ea 52 10 06 00 ......(..h..R...
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000040: 07 01 06 ab 0d 0d 03 b8 05 28 11 0c 68 03 d6 e4 .........(..h...
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000050: 00 0b 00 07 01 06 ab 0d 0d 03 b8 05 28 11 0c 68 ............(..h
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000060: 03 4d d0 60 01 00 07 01 06 ab 0d 0d 03 b8 05 28 .M.`...........(
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000070: 11 0c 68 03 ea 40 70 01 00 07 01 06 ab 0d 0d 03 ..h..@p.........
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000080: b8 05 28 11 0c 68 03 ea 4b 10 01 00 07 01 06 ab ..(..h..K.......
Dec 12 17:12:51.006: 00000090: 1 wcm: 0d 0d 03 b8 05 28 11 c0 25 5c 68 50 5f 3c 01 04 .....(..%\hP_<..
Dec 12 17:12:51.006: 000000a0: 1 wcm: 01 06 ab 12 12 03 b8 05 28 11 c0 25 5c ec 05 af ........(..%\...
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 000000b0: 24 01 07 01 06 ab 12 12 03 b8 05 28 11 0c 68 03 $..........(..h.
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 000000c0: ea 52 1f 24 01 07 01 06 ab 12 12 03 b8 05 28 11 .R.$..........(.
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 000000d0: 0c 68 03 ea 4b 1f 38 01 07 01 06 ab 12 12 03 b8 .h..K.8.........
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 000000e0: 05 28 11 0c 68 03 d6 e4 0f 38 01 07 01 06 ab 12 .(..h....8......
Dec 12 17:12:51.006: 000000f0: 1 wcm: 12 03 b8 05 28 11 c0 25 5c a3 f4 8f 30 01 07 01 ....(..%\...0...
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000100: 06 ab 12 12 03 b8 05 28 11 0c 68 03 ea 40 7f 30 .......([email protected]
Dec 12 17:12:51.006: %IOSXE-7-PLATFORM: 1 process wcm: 00000110: 01 07 01 06 ab 12 12 03 b8 05                    ..........
Dec 12 17:15:48.712: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Received Neighbor List Request from Mobile 8853.2e9e.f70a
Dec 12 17:15:48.712: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Sending Neighbor List packet to Mobile 8853.2e9e.f70a
Dec 12 17:15:48.712: %IOSXE-7-PLATFORM: 1 process wcm: 8853.2e9e.f70a Sending L2Roam Packet to mobile 8853.2e9e.f70a
Dec 12 17:15:48.712: 00000000: 1 wcm: 01 07 33 81 88 53 2e 9e f7 0a c0 25 5c 68 81 20 ..3..S.....%\h..
Dec 12 17:15:48.712: 00000010: 1 wcm: 28 11 c0 25 5c 68 81 20 01 00 02 01 06 ab 0d 0d (..%\h..........
Dec 12 17:15:48.712: %IOSXE-7-PLATFORM: 1 process wcm: 00000020: 03 b8 05 28 11 0c 68 03 ea 52 10 06 00 07 01 06 ...(..h..R......
Dec 12 17:15:48.712: %IOSXE-7-PLATFORM: 1 process wcm: 00000030: ab 0d 0d 03 b8 05 28 11 0c 68 03 ea 4a f0 0b 00 ......(..h..J...
Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 00000040: 07 01 06 ab 0d 0d 03 b8 05 28 11 0c 68 03 d6 eb .........(..h...
Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 00000050: 20 01 00 07 01 06 ab 0d 0d 03 b8 05 28 11 c0 25 ............(..
Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 00000060: 5c ec 05 a0 0b 00 07 01 06 ab 0d 0d 03 b8 05 28 \..............(
Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 00000070: 11 0c 68 03 d6 e4 00 0b 00 07 01 06 ab 0d 0d 03 ..h.............
Dec 12 17:15:48.713: 00000080: 1 wcm: b8 05 28 11 c0 25 5c 68 50 50 01 00 07 01 06 ab ..(..%\hPP......
Dec 12 17:15:48.713: 00000090: 1 wcm: 0d 0d 03 b8 05 28 11 c0 25 5c 68 81 2f 38 01 04 .....(..%\h./8..
Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 000000a0: 01 06 ab 12 12 03 b8 05 28 11 0c 68 03 ea 4a ff ........(..h..J.
Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 000000b0: 2c 01 07 01 06 ab 12 12 03 b8 05 28 11 0c 68 03 ,..........(..h.
Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 000000c0: ea 52 1f 24 01 07 01 06 ab 12 12 03 b8 05 28 11 .R.$..........(.
Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 000000d0: 0c 68 03 d6 e4 0f 38 01 07 01 06 ab 12 12 03 b8 .h....8.........
Dec 12 17:15:48.713: 000000e0: 1 wcm: 05 28 11 c0 25 5c ec 05 af 24 01 07 01 06 ab 12 .(..%\...$......
Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 000000f0: 12 03 b8 05 28 11 0c 68 03 d6 eb 2f 3c 01 07 01 ....(..h.../<...
Dec 12 17:15:48.713: %IOSXE-7-PLATFORM: 1 process wcm: 00000100: 06 ab 12 12 03 b8 05                              .......
WLC1#show wireless client mac-address 8853.2e9e.f70a ccx roam-history
Shouldn't the output be the same as the AireOS command "show client roam-history client-mac"?
Kind regards,
Vasco Costa

Obtaining CCX Client Roaming Information (CLI)
Step 1
View the current RF parameters configured for client roaming for the 802.11a or 802.11b/g network by entering this command:show {802.11a | 802.11b} l2roam rf-param
Step 2
View the CCX Layer 2 client roaming statistics for a particular access point by entering this command:show {802.11a | 802.11b} l2roam statistics ap_mac
This command provides the following information:
The number of roam reason reports received
The number of neighbor list requests received
The number of neighbor list reports sent
The number of broadcast neighbor updates sent
Step 3
View the roaming history for a particular client by entering this command:show client roam-history client_mac
This command provides the following information:
The time when the report was received
The MAC address of the access point to which the client is currently associated
The MAC address of the access point to which the client was previously associated
The channel of the access point to which the client was previously associated
The SSID of the access point to which the client was previously associated
The time when the client disassociated from the previous access point
The reason for the client roam
Debugging CCX Client Roaming Issues (CLI)
If you experience any problems with CCX Layer 2 client roaming, enter this command:
debug l2roam [detail | error | packet | all] {enable | disable}

WLC 5760 client issues

Hi,
we have a wireless setup with a HA-Pair of 5760 serving 8 WLANs via 3702APs. One of the WLANs is using WPA2-PSK with MAC-filtering. Now I'm facing the problem that some sort of clients are not reachable via the 5760. Looking at the controller they are associated, but I'm not able to ping these clients. The affected clients are using static IPs. The same clients are working fine via our old WLAN infrastructure based on Cisco WISM controllers.
For a test I disabled MAC filtering on the WLAN but that didn't help.
Any ideas ?

I don't have such a controller, but can you enable the debug log for the roaming? I don't know the exact command and you should only do it on a low usage controller. Maybe you can also debug the client once it's connected/roamed, but before you pinged it?
Also the current release is now 3.3.5SE which contains quite a few fixes.
Is the mobility-group correctly configured?
Is the client remaining in the same VLAN in the same network segment when it roams?
Do you use Flex Connect?

WLC 4402 Web Authentication, Mac Filtering and Layer 2 Seciruty

Hi All,
I have configured web authentication and Mac filtering on WLC 4402 for my wireless network and its working fine. I wants to configure layer 2 security for the same Wireless network without pre shared key. Could you please advice how to configure layer 2 security with web authentication withour preshare key.
Is there any security issue with web authentication and Mac FIltering only? My concern in my wireless network shows open.
Thanks,
Kashif

Hi,
if you have a ACS, then you can do Web auth Splash page!!! Please refer to the below doc!!
http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080956185.shtml
Lemme know if this answered ur question!!
Regards
Surendra

Deskjet 3050 J610 Wireless Setup Problem - Thinks I'm using MAC filtering

I just got an HP Deskjet 3050 J610 from my parents, who have never used it. The ink cartridges were still in their wrappers. Trying to set it up tonight, and everything was going well until I tried connecting it to the wireless network.
My router does not have WPS, so I'm having to do this via USB. The software is able to detect my router's SSID, encryption type, and password. However, when trying to connect the printer to the router, it fails. The Wireless Network Test Report claims that it might be because of MAC address filtering. I double checked my router settings, and I am NOT using MAC filtering at all. I have not yet tried rebooting everything (Printer, laptop, router), but I am doubtful that will resolve the issue. For security reasons, I would prefer not to say what security I'm using, but I will say that it IS supported by the printer.
I'm using Windows 7 on an Asus laptop, and my ISP is Verizon Fios.

Hi Manjunath, I spent the last hour on that site. Everything I found was about how to add the printer's MAC address to the router's filter settings. But I repeat, I am NOT using MAC filtering on my router, but the printer thinks I am.
Or rather... THOUGHT I was.
Rebooting the printer and the router helped. Of course, I did both at the same time, so I'm not sure which one was required, or both, but the long and the short of it is, it works now.

Can I use ASA to be a DHCP Server use in WLC wireless Client

I want to use ASA to be a DHCP Server for Wireless Client not it can't.
I check the debug log in WLC, I confirm the WLC have send the request to ASA.
In the ASA, it don't have any hits in the rule when the WLC send the DHCP relay request.
I have try don't use dhcp relay in WLC but don't success. Anybody have the same case with me? And Is the ASA can't support DHCP relay agent to request to get the IP Addr.
P.S. In the Network Design limitation so I can't use WLC to be DHCP Server.
Equipment:
ASA5510
WLC4402
How can I fix it.
Thank you very much

The issue is that the ASA doesn't accept DHCP requests from a relay agent, only broadcast DHCP requests. In the 4.2 version for the controllers there is now an option so you can change the way the controller forwards DHCP requests so that it is sent as a broadcast and not from a relay agent.

WLC 5760 - MAC Filtering wireless clients

Similar Messages

Maybe you are looking for