MSM7xx Controllers Configuration Guide v6.4.0

Filter action
The following table describes how the wireless MAC filter functions when it is used alone and
in combination with other authentication options:
When used with 802.1X
authentication
When used with MAC-based
authentication
When used
alone
Filter actionClient
address
Access is granted or denied based
on result of 802.1X authentication.
Access is granted. MAC-based
authentication is not
performed.
Access is
granted.
AllowClient
address is in
the MAC
address list.
Access is denied.Access is denied. MAC-based
authentication is not
performed.
Access is
denied.
BlockClient
address is in
the MAC
address list.
Access is granted or denied based
on result of 802.1X authentication.
Access is granted or denied
based on result of MAC-based
Access is
denied.
AllowClient
address is
authentication. (Not supported
on access-controlled VSCs.)
not in the
MAC
address list.
Access is granted or denied based
on result of 802.1X authentication.
Access is granted or denied
based on result of MAC-based
authentication.
Access is
granted.
BlockClient
address is
not in the
MAC
address list.
Configuring MAC-based filters on an HP 517 or MSM317 switch port
This option lets you control port access based on client station MAC addresses. Addresses are
checked against one or more lists stored on the controller. If the MAC address of a connected
device appears in any configured list, then the device is permitted to send and receive traffic on
the port.
To configure MAC-based filters on an HP 517 or MSM317 switch port, do the following:
1. Select Controlled APs > [HP 517 or MSM317 AP] >> Configuration > Switch ports > [ switch-port ]
in the management tool.
2. Select the MAC filter checkbox.
3. Under Available MAC lists, select each MAC list you want to use and select the right arrow
icon to move it under Allow port access using these MAC lists.
4. Select Save.
MAC-based authentication 345