topic Re: We are using CWP on a guest network. There are some devices (apple TV, treadmills) that do not have the means to accept policy and authenticate. I need the straightforward procedure to set up mac authorization for these devices. in Aerohive Migrated Content

We are using CWP on a guest network. There are some devices (apple TV, treadmills) that do not have the means to accept policy and authenticate. I need the straightforward procedure to set up mac authorization for these devices.

dyarbrough1 — Tue, 11 Dec 2018 23:24:47 GMT

We are using CWP on a guest network. There are some devices (apple TV, treadmills) that do not have the means to accept policy and authenticate. I need the straightforward procedure to set up mac authorization for these devices.

Re: We are using CWP on a guest network. There are some devices (apple TV, treadmills) that do not have the means to accept policy and authenticate. I need the straightforward procedure to set up mac authorization for these devices.

samantha_lynn — Wed, 12 Dec 2018 00:44:11 GMT

You would want to use a supplemental CLI to do this. This guide will walk you through how to set up a supplemental CLI: https://thehivecommunity.aerohive.com/s/article/Supplemental-CLI-NG

The first command we'll run will create a new MAC object, so it's just defining the MAC address of the client device we want to have whitelisted. The second command is us adding the MAC object you just mad to a whitelist. The commands we will want to add to the supplemental CLI are:

mac-object <nameofmacobject> mac-range <mac_addr(i.e.1111:2222:3333)> - <mac_addr>

security-object <nameofsecurityobject> security mac-white-list mac-object <nameofmacobject>

Re: We are using CWP on a guest network. There are some devices (apple TV, treadmills) that do not have the means to accept policy and authenticate. I need the straightforward procedure to set up mac authorization for these devices.

oliver_eve — Tue, 22 Jan 2019 03:50:07 GMT

Hey Sam,

I was wondering if you could help with an issue i've got for cwp bypass. I've noticed that when we configure the mac-objects shown above, the cwp bypass works a treat until we have to do any form of update to the aps i.e change guest network psk. Once we do that, the mac objects disappear but the CWP config remains. Any ideas how to make the mac objects permanent as it keeps breaking device access for non cwp capable devices? It's annoying having to reapply the mac objects everytime we make a change.

Cheers

Oli

Re: We are using CWP on a guest network. There are some devices (apple TV, treadmills) that do not have the means to accept policy and authenticate. I need the straightforward procedure to set up mac authorization for these devices.

samantha_lynn — Tue, 22 Jan 2019 03:52:24 GMT

You'd want to make sure to update your APs with a complete configuration so the supplemental CLI object with the MAC objects gets added to the AP. A delta configuration won't push the supplemental CLIs, and would cause the issue you are experiencing. Are you still having these problems with a complete configuration update?

Re: We are using CWP on a guest network. There are some devices (apple TV, treadmills) that do not have the means to accept policy and authenticate. I need the straightforward procedure to set up mac authorization for these devices.

oliver_eve — Tue, 22 Jan 2019 03:54:25 GMT

Hey,

We get it on any update to the AP, whether its a delta or complete. If we add mac filters but have it as permit by default and add these manual ones in also as permit, will that work? i.e will the mac objects remain?

Cheers

Re: We are using CWP on a guest network. There are some devices (apple TV, treadmills) that do not have the means to accept policy and authenticate. I need the straightforward procedure to set up mac authorization for these devices.

samantha_lynn — Tue, 22 Jan 2019 04:13:22 GMT

The supplemental CLI object, does that get applied correctly to the APs when you do the initial update before you make any changes to it or do you have to always enter those MAC objects by hand?

Re: We are using CWP on a guest network. There are some devices (apple TV, treadmills) that do not have the means to accept policy and authenticate. I need the straightforward procedure to set up mac authorization for these devices.

oliver_eve — Tue, 22 Jan 2019 04:16:01 GMT

Hey,

I've never used the supplemental CLI as it was never presented as an option to fix it. Is that route you'd recommend using?

Re: We are using CWP on a guest network. There are some devices (apple TV, treadmills) that do not have the means to accept policy and authenticate. I need the straightforward procedure to set up mac authorization for these devices.

samantha_lynn — Tue, 22 Jan 2019 04:19:48 GMT

I'm sorry for the confusion here, you would want to use the supplemental CLI, otherwise the CLI commands will get erased. From my first post on this thread: You would want to use a supplemental CLI to do this. This guide will walk you through how to set up a supplemental CLI: https://thehivecommunity.aerohive.com/s/article/Supplemental-CLI-NG