6-15
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 6 Configuring WLANsWireless Device Access
Configuring WLANs
Enabling MAC Filtering
Use these commands to enable MAC filtering on a WLAN:
•
Enter
config wlan mac-filtering enable
wlan_id
to enable MAC filtering.
•
Enter
show wlan
to verify that you have MAC filtering enabled for the WLAN.
When you enable MAC filtering, only the MAC addresses that you add to the WLAN are allowed to join
the WLAN. MAC addresses that have not been added are not allowed to join the WLAN.
Creating a Local MAC Filter
Controllers have built-in MAC filtering capability, similar to that provided by a RADIUS authorization
server.
Use these commands to add MAC addresses to a WLAN MAC filter:
•
Enter
config macfilter add
mac_addr
wlan_id
[
interface_name
] [
description
] [
IP_addr
] to create
a MAC filter entry on the controller, where the following parameters are optional:
–
interface_name
—The name of the interface.
–
description
—A brief description of the interface in double quotes (for example, “Interface1”).
–
IP_addr
—The IP address of the local MAC filter database.
•
Enter
config macfilter ip-address
mac_addr IP_addr
to assign an IP address to an existing MAC
filter entry, if one was not assigned in the
config macfilter add
command.
•
Enter
show macfilter
to verify that MAC addresses are assigned to the WLAN.
Configuring a Timeout for Disabled Clients
You can configure a timeout for disabled clients. Clients who fail to authenticate three times when
attempting to associate are automatically disabled from further association attempts. After the timeout
period expires, the client is allowed to retry authentication until it associates or fails authentication and
is excluded again. Use these commands to configure a timeout for disabled clients:
•
Enter
config wlan exclusionlist
wlan_id
timeout
to configure the timeout for disabled clients. Enter
a timeout from
1
to
65535
seconds, or enter
0
to permanently disable the client.
•
Use the
show wlan
command to verify the current timeout.
Assigning WLANs to Interfaces
Use these commands to assign a WLAN to an interface:
•
Enter this command to assign a WLAN to an interface:
config wlan interface
{
wlan_id
|
foreignAp
}
interface_id
–
Use the
interface_id
option to assign the WLAN to a specific interface.
–
Use the
foreignAp
option to use a third-party access point.
•
Enter
show wlan summary
to verify the interface assignment status.
