Use these commands to enable
MAC filtering on a WLAN:
When you enable MAC
filtering, only the MAC addresses that you add to the WLAN are allowed to join
the WLAN. MAC addresses that have not been added are not allowed to join the
When a client tries to associate to a WLAN for the first time, the
client gets authenticated with its MAC address from AAA server. If the
authentication is successful, the client gets an IP address from DHCP server,
and then the client is connected to the WLAN.
When the client roams or sends association request to the same AP or
different AP and is still connected to WLAN, the client is not authenticated
again to AAA server.
If the client is not connected to WLAN, then the client has to get
authenticated from the AAA server.