Cisco Wireless LAN Controller Configuration Guide, Release 7.4
Configuring Local MAC Filters
Downloads: This chapterpdf (PDF - 1.16 MB) The complete bookPDF (PDF - 17.94 MB) | Feedback

Configuring Local MAC Filters

Configuring Local MAC Filters

Prerequisites for Configuring Local MAC Filters

You must have AAA enabled on the WLAN to override the interface name.

Information About Local MAC Filters

Controllers have built-in MAC filtering capability, similar to that provided by a RADIUS authorization server.

Configuring Local MAC Filters (CLI)

  • Create a MAC filter entry on the controller by entering the config macfilter add mac_addr wlan_id [interface_name] [description] [IP_addr] command.

    The following parameters are optional:

    • mac_addr—MAC address of the client.

    • wlan_id—WLAN id on which the client is associating.

    • interface_name—The name of the interface. This interface name is used to override the interface configured to the WLAN.

    • description—A brief description of the interface in double quotes (for example, “Interface1”).

    • IP_addr—The IP address which is used for a passive client with the MAC address specified by the mac addr value above.

  • Assign an IP address to an existing MAC filter entry, if one was not assigned in the config macfilter add command by entering the config macfilter ip-address mac_addr IP_addr command.

  • Verify that MAC addresses are assigned to the WLAN by entering the show macfilter command.


If MAC filtering is configured, the controller tries to authenticate the wireless clients using the RADIUS servers first. Local MAC filtering is attempted only if no RADIUS servers are found, either because the RADIUS servers timed out or no RADIUS servers were configured.