Cisco 4400 Series User Manual

6-15
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 6 Configuring WLANsWireless Device Access
Configuring WLANs
Enabling MAC Filtering
Use these commands to enable MAC filtering on a WLAN:
• Enter config wlan mac-filtering enable wlan_id to enable MAC filtering.
• Enter show wlan to verify that you have MAC filtering enabled for the WLAN.
When you enable MAC filtering, only the MAC addresses that you add to the WLAN are allowed to join
the WLAN. MAC addresses that have not been added are not allowed to join the WLAN.
Creating a Local MAC Filter
Controllers have built-in MAC filtering capability, similar to that provided by a RADIUS authorization
server.
Use these commands to add MAC addresses to a WLAN MAC filter:
• Enter config macfilter add mac_addr wlan_id [interface_name] [description] [IP_addr] to create
a MAC filter entry on the controller, where the following parameters are optional:
– interface_name—The name of the interface.
– description—A brief description of the interface in double quotes (for example, “Interface1”).
– IP_addr—The IP address of the local MAC filter database.
• Enter config macfilter ip-address mac_addr IP_addr to assign an IP address to an existing MAC
filter entry, if one was not assigned in the config macfilter add command.
• Enter show macfilter to verify that MAC addresses are assigned to the WLAN.
Configuring a Timeout for Disabled Clients
You can configure a timeout for disabled clients. Clients who fail to authenticate three times when
attempting to associate are automatically disabled from further association attempts. After the timeout
period expires, the client is allowed to retry authentication until it associates or fails authentication and
is excluded again. Use these commands to configure a timeout for disabled clients:
• Enter config wlan exclusionlist wlan_id timeout to configure the timeout for disabled clients. Enter
a timeout from 1 to 65535 seconds, or enter 0 to permanently disable the client.
• Use the show wlan command to verify the current timeout.
Assigning WLANs to Interfaces
Use these commands to assign a WLAN to an interface:
• Enter this command to assign a WLAN to an interface:
config wlan interface {wlan_id | foreignAp} interface_id
– Use the interface_id option to assign the WLAN to a specific interface.
– Use the foreignAp option to use a third-party access point.
• Enter show wlan summary to verify the interface assignment status.

Cisco 4400 Series Specifications

General

Brand	Cisco
Model	4400 Series
Category	Controller
Language	English