Wireless Access

Reply
Occasional Contributor II

How to block user

We need to block some users that connect to wifi. We have blacklist the mac address. But someday user can connect again to wifi.

 

Guru Elite

Re: How to block user

What is your AAA server?

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor II

Re: How to block user

We do not use AAA for this SSID that connected.
Occasional Contributor II

Re: How to block user

Default blacklisting time is 3600 seconds, after that client is again eligible to join.

Try this:

conf t

ap ap-blacklist-time 0

end

stm add-blacklist-client <client-mac>

 

 

Occasional Contributor II

Re: How to block user

Could you please show me to make it in web-ui.

 

Re: How to block user

Monitoring -> Clients -> [Client] -> Blacklist


ACMP, ACSA, ACDX #985
If my post addresses your query, give kudos:)
Contributor II

RE: How to block user

Hi,

 

By default, the blacklist user idle time is 3600 seconds.

 

To change to unlimited, you need to change to 0 seconds.

 

I'll tell you the CLI command.

 

wlan virtual-ap <profile name>
auth-failure-blacklist-time <seconds>
blacklist-time <seconds>

Guru Elite

Re: How to block user

Blocking a user is a function of a AAA server.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Aruba Employee

Re: How to block user


idhamkhaidir@gmail.com wrote:

We need to block some users that connect to wifi. We have blacklist the mac address. But someday user can connect again to wifi.

 


Can we get more details on your wireless setup? You mention not using an external AAA server, and also that you tried to blacklist the mac address for this user, but they are still able to connect.

 

What is the security used for this SSID? PSK or 802.1X? Is mac authentication also enabled?


Charlie Clemmer
Aruba Customer Engineering
Occasional Contributor II

Re: How to block user

The security is using WPA2/PSK.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: