Wireless Access

Reply
New Contributor
Posts: 4
Registered: ‎04-12-2016

Block MAC address for our Guest SSID only

Hello Aruba Folks,

We are looking for an easy way to block certain Apple Macs from joining our guest SSID. Currently for our Windows hosts (the majority of our org) we use a GPO to prevent the selection of our Guest SSID within the Windows Wireless Adapter. Is there a way, based on MAC, to prevent them from associating to a specific Guest SSID? The community says to try to use a MAC Policy and bind it to a user role, but this is not working as expected.

 

Appreciate the help on this.

Guru Elite
Posts: 8,338
Registered: ‎09-08-2010

Re: Block MAC address for our Guest SSID only

How are you authenticating your guest users?



Is this Instant or controller?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Guru Elite
Posts: 8,338
Registered: ‎09-08-2010

Re: Block MAC address for our Guest SSID only

How are you authenticating your guest users?



Is this Instant or controller?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
New Contributor
Posts: 4
Registered: ‎04-12-2016

Re: Block MAC address for our Guest SSID only

[ Edited ]

L3 Authentication Captive Portal Authentication. Controller.

MVP
Posts: 1,412
Registered: ‎11-30-2011

Re: Block MAC address for our Guest SSID only

this is kinda difficult as you can't predict which MAC addresses will be used so a black list isn't really an option.

 

you could look into the device type role derivation, something like that is explained here:

http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Can-you-define-Policy-based-on-device-type-without-Clearpass/td-p/34407

 

if you have ClearPass and want to do the checking during the auhtentication and not the associating then you could do that easily.

Search Airheads
Showing results for 
Search instead for 
Did you mean: