Wireless Access

Hello!

We have Controller only with AP_upgrade_license.

How can we deny access to multimedia in internet for SSID (looking online video, listen online music)?

Thank you!

You would need the PEFNG license.

Also, for the most flexibility, you would need a newer 7000 series controller.

We have 7210 controller, but have no PEFNG )))

Is there some ideas?

Maybe to deny some sites - like youtube and other?

Thank you!

You need PEFNG or you'll need to use an upstream device.

Without PEFNG, there are no roles and no firewall policies other than allowall and basic guest restrictions.

http://www.arubanetworks.com/pdf/products/DS_PEF.pdf

Thank you!

Hello!

And how to do this with PEFNG license?

Thank you!

Hi friend,

After installing PEFNG license you can block applications and services category wise,

for your ref :

1. select AppRF from the Dashboard-->Block/Unblock

2. Select New and enter the required details (Example to to deny a web app Facebook)

3. Example to deny a video streaming :

Hope you got some idea now.

Please feelfree for any further help on this.

Hi!

As I see - I can aply this rule to IPv4 addresses?
But I have 3 SSID in 1 VLAN, and so all users have IP from one pool.

This rule I have to map to SSID.

Thank you!

HI,

Yes we can do this too.

1. create a policy to allow or deny applications and services as shown below,

2. Map this policy to a role and map the role to the AAA profile(default role) which is mapped to the VAP where the required SSID profile is mapped.

3. When somebody selectes this SSID they will be mapped to the default role ( or SDR ) and their application access will be controlled according to the Policy.

Hope got some more clarity,

Please feel free for any further help on this.

And this policies wouldn't work without PEFNG license?

Thank yoU!

Yes, neds PEF license,

Not only for this, in order to create any policy you need PEF ( Policy Enforcement Firewall) license.

Hope got more clarity.

Please feelfree for any furhter query on this.

And 1 more question:

how can I limit bandtwight (rate limit) in some SSID with policy?

For example 256Kbps

Thank yoU!