Q: What is “Exempt Valid Clients (exempt-station-list)” option and how to configure and verify?
A: This feature will allow the system administrator to give certain client devices special permission to associate non-valid APs.
If a client is added to the ‘exempt-stations list’ then that client will not be included in any configured IDS policies which detect and protect against valid stations associating to non-valid APs.
If a client is valid-exempt (Client MAC is addend to exempt-station-list), the Aruba AP will not:
- detect valid-station-misassociation for that client.
- enforce valid-station-protection on that client
- To add a client device MAC addresses to the Valid-exempt
wms client <mac> valid-exempt insert
- To add a client device MAC addresses to the Valid-exempt
wms client <mac> valid-exempt remove
- To see full list of configured valid-exempt clients
show wms client valid-exempt
- The clients that are being seen by the AP and are marked as valid-exempt
show ap monitor client-list ap-name <> valid-exempt