cancel
Showing results for 
Search instead for 
Did you mean: 

list existing MAC-PPSK bindings + command to remove them?

list existing MAC-PPSK bindings + command to remove them?

herta_vandeneyn
New Contributor

For guests who visit our company for a short period of time, we used to create PPSKs with MAC-binding and had set credentials to be deleted after a few days.

 

When those visitors return, possibly months later, we generate a new PPSK, but they cannot reconnect.

 

Sometimes, though rarely, it is sufficient to have their device 'forget' about the connection.

Sometimes, we have to unbind the MAC/PPSK Binding in HiveManager, but usually we can only do this based on the MAC-address.  It usually is not enough.

Sometimes, the visitor still has the mail with the previous PPSK, in which case we can register the old PPSK to the new user entry.

 

Most of the time it is a tedious process, which is highly inconvenient.

 

I searched the AP which safeguards the MAC-PPSK binding, but I cannot find a command that will list which MAC-PPSK bindings exist, nor how to remove them.

 

Is there such a command?

 

Is there an easier way of dealing with these obsolete records?

5 REPLIES 5

samantha_lynn
Esteemed Contributor III

This command will show you which PPSK credentials are tied to which MAC address:

_test auth mac-bind show <ssid profile name> <mac address> 

 

And this command will unbind a MAC address from a PPSK user:

exec auth <SSID> ppsk-mac-unbinding mac-ppsk <mac-address> <password>

 

Is that what you were looking for?

GTM-P2G8KFN