Cisco AP setup for MAC access control

[woodyh]

Have a Cisco 352 AP, about 40 occasional users. Have set SSID and WEP 128 to control access - this works fine. Want to use MAC access control too. I can't make it limit access.
I have done this:
Inputted the MAC addresses to the AP and flagged them "allowed".
Said "no" to the use of an Authentication server. Said "yes" to Is MAC Authentication alone sufficient...
On the "AP Radio Advanced" page, marked "disallowed" to Default Multicast Address Filter and Default Unicast Address Filter for all authentication types - I'm only using "open".
The AP does not limit non-identified MACs from accessing it.
Has anyone solved this problem?

 

[manarth]

This may not address your specific problem, but have you checked that your firmware is the latest available?

It may sound daft, but the number of times I've faced the device "out of the box" not fulfilling the given specifications - well, it's too many to count

<marc> i wonder what will happen if i press this...[ul][li]please give feedback on what works / what doesn't[/li][li]need some help? how to get a better answer: faq581-3339[/li][/ul]

 

[Veggie444]

If you want it to block the MAC addresses you will need to go under the advanced settings and change the Unicast setting to disallowed. If you need help with this, please let me know

veggie444@hotmail.com

 

[dm318]

Hi folks,

I'm facing a similar problem as well. Can any kind soul help document briefly the steps needed to set MAC filtering on the Aironet AP350?? I mean MAC filtering as in restricting only a local list of allowed 802.11 wireless NICs to access the network via the Aironet AP. I tried the following settings but I have a feeling I am getting it wrong. Thanks in advance!!!

*** Assuming using SSID & 128-bit WEP and all clients are accessing resources via the AP successfully.

1)Go to SETUP > ADDRESS FILTERS
2)Key in MAC address of a ALLOWED wireless NIC & click ADD; Click APPLY & OK to return to main menu
3)Go to AP RADIO/FILTERS
4)Under ETHERTYPE choose MAC ADDRESS FILTERING for both RECEIVE and TRANSMIT; Click APPLY & OK
5)Go to AP RADIO/ADVANCED and choose DISALLOWED for DEFAULT MULTICAST ADDRESS FILTER; Click APPLY & OK

Please help me where possible. Big thanks in advance!!!!

 

[woodyh]

Try the following - it worked for me.
under &quot;Address Filters&quot; find &quot;Is MAC Authentication alone sufficient for a client to be fully authenticated?&quot; set this to &quot;NO&quot;
It seems inconsistant - but the Access Point will not check for MAC addresses unless this is set to NO. I found a reference to this in some Cisco document. The question is poorly worded.