Wireless Access

Reply
Frequent Contributor I

mac filtering?

I have an aruba 3600 with a remote ap connected in bridge mode.  Is it possible to create a mac filter that will only let specific mac addresses authenticate to the remote ap-105? I also have an aruba 620 with a campus ap attached that I would like to do the same thing with... If so how does one accomplish it?  

Guru Elite

Re: mac filtering?

There is a chapter in the user guided dedicated to Mac authentication.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Guru Elite

Re: mac filtering?

The answer is yes.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor I

Re: mac filtering?

I don't want to authenticate using mac address, I want to authenticate using wpa2.  I just want to filter which ones are allowed to use wpa2 psk.   I did find that I could probably just create a mac policy and add each person's mac address that I want to allow.

Guru Elite

Re: mac filtering?


bigtone wrote:

I don't want to authenticate using mac address, I want to authenticate using wpa2.  I just want to filter which ones are allowed to use wpa2 psk.   I did find that I could probably just create a mac policy and add each person's mac address that I want to allow.


The answer is, first create a wireless network or Virtual AP that allows you to do WPA2-PSK and get that working.  After that, go back into the AAA profile of that WLAN and add a mac authentication profile as well as a mac authentication server group.  That will add mac authentication to that WLAN.  If a devices does not pass mac authentication, it will simply not be able to get on.

 

In 6.1 in the AAA profile there is a parameter called l2 failthrough, where if it does not pass mac authentication, it will then allow devices to get on using WPA2-PSK or 802.1x or whatever the SSID is configured for.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor I

Re: mac filtering?

 

Do I add the list of mac addresses I want to allow in a mac policy or do I do that in the mac authentication server group server?

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: