Wireless Access

Reply
Occasional Contributor I
Posts: 9
Registered: ‎12-11-2013

Blocking wireless users

[ Edited ]

Is there a way to block a specific device from using the wireless network? thanks in advance

MVP
Posts: 4,238
Registered: ‎07-20-2011

Re: Blocking wireless users

 

You could blacklist the device or use the UDR and match the mac address of the device to be place in a DENY ROLE

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Guru Elite
Posts: 8,335
Registered: ‎09-08-2010

Re: Blocking wireless users

[ Edited ]

You can blacklist the client which will prevent them from fully associating. On each local controller:

 

stm add-blacklist-client <mac-addr>

 Also, if you want to permantently block the clients (by default, the blacklist ages out), you'll need to run the following command:

 

(config) #ap ap-blacklist-time 0

 


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Aruba
Posts: 233
Registered: ‎11-19-2009

Re: Blocking wireless users

Not sure if the specific diveice which you want to block is wired or wireless. If it is wireless, you can just simple black-list as per prevous comments. if we are talking about any wired deivce that you dont want to access the wireless network.

 

i would recomment to just put the ACL on the controller uplink to drop the traffic from the device to WLAN on the controller.

 

Say for example by this way..

 

Config t

ip access-list session "block device"

any host <ip address of the device> any deny

any any any permit

 

Map this policy to controller uplink to drop the traffic. Make sure you add any any any permit is added to the below policy.

 

Thank you.

 

 

Contributor I
Posts: 24
Registered: ‎05-07-2013

Re: Blocking wireless users

That's good to know.  For the wired connections though we handled that through cisco but it's good to know we can do the wired ones as well.  Much appreciated:)

Search Airheads
Showing results for 
Search instead for 
Did you mean: