Wow, thank you so much for the video! Just one question, I am looking to do just the opposite, i.e. block the connection of a certain group of devices to a SSID, would it be possible? Thank you very much in advance!
MAC filtering is working for me, but it seems like any device on the list can connect to any SSID that has mac filtering turned on. Even specifying different SSIDs in the device authentication list, or using different attribute lists, doesn't work. It seems broken, that I can't limit specific MACs to specific WLANs.
Could you make a video on EmbededWirelessController 9800 eWLC on 9100 Series AccessPoints (9120-EWC-E) without WLC (WireLessController from Cisco) with different VLANS on switches (Catalyst 1000 or CBS350) and corresponding VLANS on the accesspoints (C9120-EWC-E ). Thank you. There is a big difference between the WirelessController 9800-L and the EmbededWirelessController eWLC. You cannot manage VLANS on the EmbedeWirelessController of an access point like on the hardware wireless controller. So you can't connect VLANs to the switch or you know a solution. Thanks for your feedback.
what if i want to block 1 or 2 macs but have thousands of allowed? I dont want to write an allow policy for a gizillion macs, i just want to block 1 or 2 from the ssid.
Hello!!! When I configure the Attibute List Name I can see the announcement that says the configuration was applied but when I go to another windows configuration like dashboard, monitoring or any other WLC windows and I go back to the attribute list the itself disappear I have configured it many times you I get the same result. Do you know if this is a license issue or maybe a bug? My Version is 16.12
Hmm - Unfortunately, that sounds like it may be a bug? Looks like the latest recommended release is 16.12.4a - is that what you're running? If it's a non-production system, might also be worth trying 17.4.x...
i have radius server have mac addr in database mysql . i want config wlc9800 search mac address from external radius server. now i config input mac address in wlc9800 it work. but i want wlc9800 search radius server . you do have step config ? thanks
Thanks mate, but its not working... R0/0: wncd: Authorization failed or unapplied for client (*********) on Interface capwap_******** AuditSessionID 0000000000000***********. Failure reason: Authc fail. Authc failure reason: AAA Server Down.
They dont make it easy to go from a 2504 controller that already has the Description field and the 9800-40's that don't have that field. What genius thought that wasn't important? Have you installed any 17.x in your environment and are there any pitfalls in doing so?
I've been running 17.x for most of the year, and no real issues so far. I ran 16.x for a bit - but there were a few new features in 17.x that I wanted to try out. So far so good!
@@0x2142 Thanks for that. I have a ticket open with TAC and they just wanted me on the latest 16x. In fact - still flagged as the preferred on the Cisco site. Your MAC filter has a description field now?
Yeah I think they'll be keeping with even-numbered releases as recommended - where odd numbers will be new / bleeding-edge with new features. 17.x does support the description field - around 6:41 in the video should show it: th-cam.com/video/rWupjgsF0HM/w-d-xo.html
Under the AAA authorization config, do you have the group type set as local? I also have a blog post I wrote with screenshots, if you would like to double check what you have configured: 0x2142.com/how-to-catalyst-9800-mac-filtering/ If it's not working after that, it might be worth opening a case with TAC
@@0x2142 Hello, where you able to find a solution to this problem? I am having the same issue. I followed exactly the same steps as in the video and the SSID works fine until I turn on MAC filtering then I am unable the connect to the SSID. Log shows "Failure reason: Authc fail. Authc failure reason: AAA Server Down" and I have AAA authorization set to "Network" and "Local". Help, please!
![[How To] Cisco Catalyst 9100 AP - Convert to Embedded WLC](/img/n.gif)
Finally! I have been looking for a straightforward video on how to do this for a while. Thankyou!
Awesome! 🥳 Glad to hear it & thanks so much for the comment!
Thanks a lot for this clear explanation
Thanks.
Awesome
Wow, thank you so much for the video! Just one question, I am looking to do just the opposite, i.e. block the connection of a certain group of devices to a SSID, would it be possible? Thank you very much in advance!
MAC filtering is working for me, but it seems like any device on the list can connect to any SSID that has mac filtering turned on. Even specifying different SSIDs in the device authentication list, or using different attribute lists, doesn't work. It seems broken, that I can't limit specific MACs to specific WLANs.
thanksssss
Good 👍
I don't see any option to add description into the mac address entry in version 16. Does the feature only exist in newer version 17?
Hey there -
Yeah, it does look like that field is only available in the 17.x release. My 16.x lab doesn't have that field either.
Could you make a video on EmbededWirelessController 9800 eWLC on 9100 Series AccessPoints (9120-EWC-E) without WLC (WireLessController from Cisco) with different VLANS on switches (Catalyst 1000 or CBS350) and corresponding VLANS on the accesspoints (C9120-EWC-E ). Thank you.
There is a big difference between the WirelessController 9800-L and the EmbededWirelessController eWLC.
You cannot manage VLANS on the EmbedeWirelessController of an access point like on the hardware wireless controller. So you can't connect VLANs to the switch or you know a solution. Thanks for your feedback.
what if i want to block 1 or 2 macs but have thousands of allowed? I dont want to write an allow policy for a gizillion macs, i just want to block 1 or 2 from the ssid.
how did you disabled the 2.4ghz band?
Do mac address filtering work with ssid with radius auth?
Hello!!! When I configure the Attibute List Name I can see the announcement that says the configuration was applied but when I go to another windows configuration like dashboard, monitoring or any other WLC windows and I go back to the attribute list the itself disappear I have configured it many times you I get the same result. Do you know if this is a license issue or maybe a bug? My Version is 16.12
Hmm - Unfortunately, that sounds like it may be a bug? Looks like the latest recommended release is 16.12.4a - is that what you're running? If it's a non-production system, might also be worth trying 17.4.x...
i have radius server have mac addr in database mysql . i want config wlc9800 search mac address from external radius server.
now i config input mac address in wlc9800 it work. but i want wlc9800 search radius server . you do have step config ? thanks
Thanks mate, but its not working...
R0/0: wncd: Authorization failed or unapplied for client (*********) on Interface capwap_******** AuditSessionID 0000000000000***********. Failure reason: Authc fail. Authc failure reason: AAA Server Down.
It works if you use mac-address format "AABBCCDDEEFF" without colons
😍👌🏼💜🔔🎉🌈
They dont make it easy to go from a 2504 controller that already has the Description field and the 9800-40's that don't have that field. What genius thought that wasn't important? Have you installed any 17.x in your environment and are there any pitfalls in doing so?
I've been running 17.x for most of the year, and no real issues so far. I ran 16.x for a bit - but there were a few new features in 17.x that I wanted to try out. So far so good!
@@0x2142 Thanks for that. I have a ticket open with TAC and they just wanted me on the latest 16x. In fact - still flagged as the preferred on the Cisco site. Your MAC filter has a description field now?
Yeah I think they'll be keeping with even-numbered releases as recommended - where odd numbers will be new / bleeding-edge with new features. 17.x does support the description field - around 6:41 in the video should show it: th-cam.com/video/rWupjgsF0HM/w-d-xo.html
Hi,
do you know if this conf works with EWC?
Yes, it does! I have tested this both with the 9800-CL (virtual appliance) and the embedded EWC controller. Works with both!
@@0x2142
I already did the configuration, exactly like the video, but it is not working. In the logs the error is AAA Server Down. Any idea?
Under the AAA authorization config, do you have the group type set as local?
I also have a blog post I wrote with screenshots, if you would like to double check what you have configured: 0x2142.com/how-to-catalyst-9800-mac-filtering/
If it's not working after that, it might be worth opening a case with TAC
@@0x2142 Hello, where you able to find a solution to this problem? I am having the same issue. I followed exactly the same steps as in the video and the SSID works fine until I turn on MAC filtering then I am unable the connect to the SSID. Log shows "Failure reason: Authc fail. Authc failure reason: AAA Server Down" and I have AAA authorization set to "Network" and "Local". Help, please!
@@joaomha HEllo, did you find a solution to this issue? I am having the same issue