Controllerless Networks

last person joined: 2 hours ago 

Aruba Instant Wi-Fi: Meet the controllerless Wi-Fi solution that's easy to set-up, is loaded with security and smarts, and won't break your budget.
Expand all | Collapse all

IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

Jump to Best Answer
  • 1.  IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 19, 2014 04:12 AM

    Anyone else had issues getting this to work? We have blacklisted several client devices that are exceeding acceptable daily bandwidths and yet they are still connected and working. We have migrated from 6.2.1.0-3.3.0.3 to the latest code and rebooted to no effect.

     

    Regards

     

    Mike



  • 2.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 19, 2014 04:42 AM
    Can you send the output of ?show tech-support??


  • 3.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 19, 2014 04:48 AM
      |   view attached

    As requested have attached a show tech.

     

    Regards

     

    Mike

    Attachment(s)

    txt
    199109.txt   165 KB 1 version


  • 4.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 20, 2014 02:54 AM

    Have you had chance to look at the tech support file yet?

     

    Regards

     

    Mike



  • 5.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 20, 2014 03:28 AM
    Are you having trouble with the blacklist function on all the configured SSIDs or just some of them?


  • 6.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 20, 2014 03:33 AM

    Good morning - manula blacklist doesnt seem to work on at least the last 3 versions of firmware in any SSID we configure - the device configured on the blacklist is not blocked from the SSID and uses the service as per normal.

     

    Regards

     

    Mike



  • 7.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 20, 2014 04:06 AM
    The current ?show tech-support? does not appear to have captured the time when the blacklisted clients are connecting. Could we black list a test client, connect the test client, and then take the ?show tech-support? dump?


  • 8.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 20, 2014 04:26 AM

    It was captured when one of the blacklisted clients was connected and working.

     

    blacklist-client 2c:d0:5a:9f:8b:aa

    blacklist-client 24:fd:52:b0:6e:45

    blacklist-client e0:06:e6:81:76:55

    blacklist-client 70:56:81:8a:de:77

    blacklist-client 54:e4:3a:23:5d:6e

    blacklist-client 38:aa:3c:ea:fc:95

     

     

    24:fd:52:b0:6e:45  Chadwick



  • 9.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 20, 2014 04:39 AM
    Sorry I wasn?t clear. Could we get the ?tech-support? capture from the AP named "199109-AP05-Restaurant", where the Chadwick client is connecting from?

    24:fd:52:b0:6e:45 Chadwick 10.113.55.73 O2 Wifi 199109-AP05-Restaurant


    Thanks

    Yan


  • 10.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 20, 2014 06:10 AM

    Hi Yan, Just checked and so far no blacklisted clients have connected - will keep an eye on this site all day and update when I have the requested show tech from the AP.

     

    Regards

     

    Mike



  • 11.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 21, 2014 02:56 AM

    Hi Yan,

                Still waiting for a blacklisted client to reappear - while we wait would it be possible for you to test blacklisting in your lab and just confirm yes or no if you think its working as expected?

     

    Regards

     

    Mike



  • 12.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 19, 2014 04:42 AM
    Check out the black listing time

    (Instant Access Point)# show blacklist-client config


  • 13.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting
    Best Answer

    Posted Feb 23, 2014 11:54 PM

    I was having the exact same issue. I then realized that I had to turn on blacklisting not just on the AP side, but also on the Network Side as well (SSID), under tab number 3, security, there's a blacklisting option that needs to be enabled. Once I did that, it started to block mac addresses that were manually entered in the blacklist.



  • 14.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting
    Best Answer

    Posted Feb 24, 2014 10:20 AM

    Correct, you need to create your blacklist entires, and then bind it to the SSID in question. If will not function otherwise. Its similiar to creating DHCP scopes, the definition creates the scope, but then the SSID config needs to include it to have it functional. 

     

    Cheers, Adam



  • 15.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 24, 2014 10:27 AM

    That's it....slightly confusing because the documentation implies this is for dynamic blacklisting...thank you so much for taking the time to reply, very much appreciated.

     

    Regards

     

    Mike



  • 16.  RE: IAP 6.3.1.2-4.0.0.2 and Manual Blacklisting

    Posted Feb 25, 2014 08:58 AM

    Yes, I can see that point - but consider you may have different SSID's with different requirements, so the abilty to apply the black list (or any other config) to one SSID and not the other could be helpful in certain situations.

     

    In any event, glad its working for you! :)

     

    Adam