Wireless Access

Reply
Super Contributor II

Blocking some traffic to a specific device on IAP

Hi guys,

 

I am testing some of the features of IAP and I want to block some traffic (for example youtube traffic) to a specific device. I want to block the traffic specifying the IP address of the device. For doing that, on Access Rules > Role-based > New Role Assignment Rule > Attribute I can't find any attribute that references an IP address

 

IAPRolebased.png

 

Is there any way of doing that?

 

Regards,

Julián

Guru Elite

Re: Blocking some traffic to a specific device on IAP

No. You would use user-roles.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Super Contributor II

Re: Blocking some traffic to a specific device on IAP

Hi Tim,

 

Then, if I want to block the traffic for a specific user, do I select the attribute User-Name maybe?

 

Regards,

Julián

Guru Elite

Re: Blocking some traffic to a specific device on IAP

You would return that role name in the RADIUS response based on policy.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Super Contributor II

Re: Blocking some traffic to a specific device on IAP

Hi,

 

But isn't there other way? I am using IAPs with WPA PSK authentication, without using RADIUS servers.

 

Regards,

Julián

Guru Elite

Re: Blocking some traffic to a specific device on IAP

How are you identifying a user then?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Super Contributor II

Re: Blocking some traffic to a specific device on IAP

Hi,

 

My test scenario is very simple. I have an IAP broadcasting one SSID and I connect two users/laptops to this SSID using WPA PSK. Now I want to block youtube traffic to only one client. What are the options?

 

Regards,

Julián

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: