Controller-less WLANs

How to restrict static IP address users from the IAP user entries?
Q:

How to restrict static IP address users from the IAP user entries?



A:

From 4.2.1.0, IAP supports enforce DHCP both on CLI and UI for wireless users.

This feature allows IAP only create layer3 user entry for client obtain IP address via DHCP.

For client that use static IP, IAP won’t create layer3 user entry, therefore all its IP traffic will be blocked.

Enforce DHCP knob is disabled by default.

 

 

CLI:

IAP # configure t

IAP (config) #wlan ssid-profile btest

IAP (SSID Profile "btest") # enforce-dhcp

IAP (SSID Profile "btest") # end

IAP # commit apply

 

wlan ssid-profile btest

 enable

 index 8

 type employee

 essid btest

 opmode opensystem

 max-authentication-failures 0

 rf-band all

 captive-portal disable

 dtim-period 1

 broadcast-filter none

 enforce-dhcp     <===========================================

 dmo-channel-utilization-threshold 90

 local-probe-req-thresh 0

 max-clients-threshold 64

 

 

 

 

Version History
Revision #:
2 of 2
Last update:
‎05-17-2016 04:05 PM
Updated by:
 
Labels (1)
Contributors
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.