Wireless Access

Reply
Regular Contributor I
Posts: 175
Registered: ‎10-22-2010

No PEFNG license, any way to stop the wifi clients from hitting the web-page on the controller.

[ Edited ]

Hi, 

 

This is the scenario. 

 

The controller has no PEFNG license, the controller does the routing for the client vlans. I mean the default gateway for the clients is on the controller.

 

is there any way for to stop the clients from getting the webpage of the controller, if they put the default-gateway ip in the web-browser.

 

The clinet ssid is WPA2-PSK, and get vlans assigned from the VAP. 

 

regards,

 

 

MVP
Posts: 4,301
Registered: ‎07-20-2011

Re: No PEFNG license, any way to stop the wifi clients from hitting the web-page on the controller.

 

Unfortunately you can't stop this from the controller side if you don't have the PEF licenses.

 

But if you have an uplink switch that supports ACLs you could do or an external firewall.

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Guru Elite
Posts: 21,260
Registered: ‎03-29-2007

Re: No PEFNG license, any way to stop the wifi clients from hitting the web-page on the controller.


yogenpartha wrote:

Hi, 

 

This is the scenario. 

 

The controller has no PEFNG license, the controller does the routing for the client vlans. I mean the default gateway for the clients is on the controller.

 

is there any way for to stop the clients from getting the webpage of the controller, if they put the default-gateway ip in the web-browser.

 

The clinet ssid is WPA2-PSK, and get vlans assigned from the VAP. 

 

regards,

 

 


In ArubaOS 6.3, the new ACL Whitelist feature (Configuration> Advanced Services> Stateful Firewall> ACL Whitelist) does not require the PEF license.  This can be used to block traffic to the controller:  http://www.arubanetworks.com/techdocs/ArubaOS_63_Web_Help/Web_Help_Index.htm#ArubaFrameStyles/Firewall_Roles/Policies.htm



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Regular Contributor I
Posts: 175
Registered: ‎10-22-2010

Re: No PEFNG license, any way to stop the wifi clients from hitting the web-page on the controller.

Cjoseph,

Thank you. i tested it works..

Search Airheads
Showing results for 
Search instead for 
Did you mean: