Wireless Access

Is there a way to block a MAC address that attempts to connect to our wireless system?? Aruba 650 controller (6.1.3.7)

In order to permanently blacklist a client (across controller reboots), you will need AOS 6.2

You can blacklist the client using the following command:

stm add-blacklist-client <mac address>

Once you are on AOS 6.2+, you can run the following command to change the blacklist timer to permanent:

(config) #ap ap-blacklist-time 0

I updated to 6.2 and ran the 1st command and notice it counting down from an hour under Monitoring>Blacklist Clients.. then ran the second command and saved the config and still see the timer counting down

that did it!  thanks!

Are there REST APIs to interact with Clearpass server that we can add/remove endpoint to/from blacklist by its IP or MAC address? 

Which blacklist are you referring to? This thread is about the controller's blacklist.

I'm interested in a way to blacklist a client on the controller (mimicing the CLI command) via API. The API requires IP address which won't work for us - I'd like to just specify MAC address.

Unfortunately the XML-API on the controller requires an ip address to also blacklist a client.  It is a mandatory requirement:  http://www.arubanetworks.com/techdocs/ArubaOS_81_Web_Help/Web_Help_Index.htm#ArubaFrameStyles/XML_API/XML_Request.htm%3FTocPath%3DArubaOS%2520User%2520Guide%7CExternal%2520User%2520Management%7C_____3