Controller Based WLANs

Environment : This article applies to Aruba Mobility Domain with ArubaOS.

Surprisingly, some clients experience problem in connecting to an SSID and as a WLAN administrator one would not have a clue. The first place where an administrator should look into,  is the output of following CLI command to see if the MAC address of the client is listed here:

"Show ap blacklist-clients"

There are several reasons why a client gets blacklisted. For example, when you enable different Aruba intrusion detection system (IDS) features that detect suspicious activities, such as MAC address spoofing or DoS attacks.

Below shown are the various reasons for a client getting blacklisted:

• You can configure the duration that clients are blacklisted on a per-SSID basis via the virtual AP profile. There are two different blacklist duration settings:
  
  

  • For clients that are blacklisted due to authentication failure. By default, this is set to 0 (the client is blacklisted indefinitely)

   

  • For clients that are blacklisted due to other reasons, including manual blacklisting. By default, this is set to 3600 seconds (one hour). You can set this to 0 to blacklist clients indefinitely.