Wireless Access

Reply
Frequent Contributor I
Posts: 62
Registered: ‎10-25-2013

Controller, deny multimedia in SSID

Hello!

 

We have Controller only with AP_upgrade_license.

How can we deny access to multimedia in internet for SSID (looking online video, listen online music)?

 

Thank you!

Guru Elite
Posts: 8,456
Registered: ‎09-08-2010

Re: Controller, deny multimedia in SSID

You would need the PEFNG license.

 

Also, for the most flexibility, you would need a newer 7000 series controller.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor I
Posts: 62
Registered: ‎10-25-2013

Re: Controller, deny multimedia in SSID

We have 7210 controller, but have no PEFNG )))

 

Is there some ideas?

Maybe to deny some sites - like youtube and other?

 

Thank you!

Guru Elite
Posts: 8,456
Registered: ‎09-08-2010

Re: Controller, deny multimedia in SSID

[ Edited ]

You need PEFNG or you'll need to use an upstream device.

 

Without PEFNG, there are no roles and no firewall policies other than allowall and basic guest restrictions.

 

http://www.arubanetworks.com/pdf/products/DS_PEF.pdf


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor I
Posts: 62
Registered: ‎10-25-2013

Re: Controller, deny multimedia in SSID

Thank you!

Frequent Contributor I
Posts: 62
Registered: ‎10-25-2013

Re: Controller, deny multimedia in SSID

Hello!

 

And how to do this with PEFNG license?

 

Thank you!

Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: Controller, deny multimedia in SSID

Hi friend,

 

After installing PEFNG license you can block applications and services category wise,

 

for your ref :

 

1. select AppRF from the Dashboard-->Block/Unblock

 

AppRF1.JPG

 

2. Select New and enter the required details (Example to to deny a web app Facebook)

 

AppRF2.JPG

3. Example to deny a video streaming :

 

AppRF3.JPG

 

Hope you got some idea now.

 

Please feelfree for any further help on this.

 

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Frequent Contributor I
Posts: 62
Registered: ‎10-25-2013

Re: Controller, deny multimedia in SSID

Hi!

 

As I see - I can aply this rule to IPv4 addresses?
But I have 3 SSID in 1 VLAN, and so all users have IP from one pool.

This rule I have to map to SSID.

 

Thank you!

Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: Controller, deny multimedia in SSID

HI,

 

Yes we can do this too.

 

1. create a policy to allow or deny applications and services as shown below,

AppRF4.JPG

 

2. Map this policy to a role and map the role to the AAA profile(default role) which is mapped to the VAP where the required SSID profile is mapped.

 

3. When somebody selectes this SSID they will be mapped to the default role ( or SDR ) and their application access will be controlled according to the Policy.

 

Hope got some more clarity,

 

Please feel free for any further help on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Frequent Contributor I
Posts: 62
Registered: ‎10-25-2013

Re: Controller, deny multimedia in SSID

And this policies wouldn't work without PEFNG license?

 

Thank yoU!

Search Airheads
Showing results for 
Search instead for 
Did you mean: