This should be very easy, but it seems I'm having a hard time with it.

I'm try to get three 340s and one 350 to deny any MAC addy not in their list.
They are using open authentication (no WEP), and the lists contain up to date
MAC address of my users.  The firmware is 12.03T on all units (just upgraded
them yesterday).  I've also disallowed the default unicast adress filter in the
AP Radio/Advanced page (for Open/Shared/EAP).

My wireless MAC isn't added in, but can still associate with the APs, ping
various place on my network and in the internet etc.  In the AP's logs I see the
following:

2003/09/18 15:44:15        Info        Station [10.40.8.143]00022d0e1fbd roamed
2003/09/18 15:43:52        Info        Station [10.40.8.143]00022d0e1fbd Associated
2003/09/18 15:43:52        Info        Station [10.40.8.143]00022d0e1fbd
Authenticated
2003/09/18 15:42:34        Info        Station [10.40.8.143]00022d0e1fbd roamed
2003/09/18 15:41:44        Info        Station [10.40.8.143]00022d0e1fbd
Reassociated
2003/09/18 15:41:44        Info        Station [10.40.8.143]00022d0e1fbd
Authenticated
2003/09/18 15:41:44        Info        Deauthenticating
[10.40.8.143]00022d0e1fbd, reason
"Must Authenticate Before Associating"

I have to auth before I assoc, but I auth right through without a problem.

I've read the documentation from Cisco on this portion at least half a dozen
times in the last two days.  I'm sure we paid some nice cash for these things,
but I'm starting to feel like we should have got a few Linksys or something. 
What am I missing?
--
general wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless

Reply via email to