MAC filtering - Procurve Wireless Edge Services WS.02.27

[Theblacksheep]

Hi,

 

We have nearly site wide HP wireless edge module on a 5304xl switch. This has nearly 40 APs loitered around the site.

 

It was setup to have a few different SSID for access for Teacher Laptops, class laptops and minibooks on different VLANS.

 

However this has no authentication but it does have tkip encryption. Seeing as the CC3 system is on its way out in 6 months, 802.1x was gonna wait until everything is up and running... anyway...

 

I wanted to prove access for a limited amount of non school owned devices (iphones, pda's) to get onto this AP and access our exchange 2003 box for some mail if they wish. Creation of the SSID is ok, link it to a VLAN and tag the uplinks in the 5304, all ok....

 

however, put on 'mac authentication' and it'll never get an IP.

 

The mac filter has two ACLs:

 

#100 A client PC - allow

#1000 00etc-FFetc - deny.

 

these are associated with the WLAN SSID.

 

Even if i change the #1000 acl it'll still not doing a thing except getting a 169 address. Turn MAC filtering off and its fine.... anyone got any experience with these HP wireless systems??

 

and no we dont want to be sold a new wireless system.

[DMcCoy]

Have you tried specifying the mac as a start and end address? Thats what I have to do for the zl modules (start and end being the same for a single MAC).

[Theblacksheep]

Have you tried specifying the mac as a start and end address? Thats what I have to do for the zl modules (start and end being the same for a single MAC).

 

Thanks for the reply.

 

 

 

Yeah the "#100 A client PC - allow" client is a PC specified by MAC address at both start and end.

 

The #1000 is a block all (0000000001-FFFFFFFFFE) but i've set that to allow all too and no luck.

 

 

No mac auth: Connected and got IP from correct vlan straigh away.

 

mac auth on and mac specified in allow list: Connects but no IP.

 

Mac auth on but not listed in allow list: No connection and no ip.