Note: There is no special configuration needed on the wireless client in order to support MAC authentication.Ĭonfigure a WLAN and Enable MAC FilteringĬomplete these steps in order to configure a WLAN with MAC filtering: If you are a new user trying to set up the WLC for basic operation with LAPs, refer to Lightweight AP (LAP) Registration to a Wireless LAN Controller (WLC).

This document assumes that the WLC is already configured for basic operation and that the LAPs are registered to the WLC. Configure the Local Database on the WLC with Client MAC Addresses Note: Before you configure MAC authentication, you must configure the WLC for basic operation and register the LAPs to the WLC.Configure a WLAN and Enable MAC Filtering.Configure Local MAC Authentication on WLCsĬomplete these steps in order to configure local MAC authentication on the WLCs: Any RADIUS server which supports MAC address authentication can be used. If the client authentication is successful, the client is granted access to the WLAN. Then, the RADIUS server validates the MAC address based on the database it has. When a user database is stored on a RADIUS server the WLC forwards the MAC address of the client to the RADIUS server for client validation. The only difference is that the users MAC address database is stored in the RADIUS server instead of the WLC. Enter the maximum number of entries (512-2048)Īlternatively, MAC address authentication can also be performed using a RADIUS server. In order to increase the local database, use this command from the CLI: config database size ? Together, all of these types of users cannot exceed the configured database size. Access point authorization list entries.Local network users, which includes guest users.Local management users, which includes lobby ambassadors.The local database stores entries for these items: The local user database is limited to a maximum of 2048 entries. When a user tries to access the WLAN that is configured for MAC filtering, the client MAC address is validated against the local database on the WLC, and the client is granted access to the WLAN if the authentication is successful.īy default, the WLC local database supports up to 512 user entries. With local MAC authentication, user MAC addresses are stored in a database on the WLC. MAC authentication using a RADIUS server.There are two types of MAC authentication that are supported on WLCs: When you create a MAC address filter on WLCs, users are granted or denied access to the WLAN network based on the MAC address of the client they use. Ref : MAC Address Filter (MAC Authentication) on WLCs

How to enable mac filtering using vlan