Is there a way to block a MAC address that attempts to connect to our wireless system?? Aruba 650 controller (18.104.22.168)
In order to permanently blacklist a client (across controller reboots), you will need AOS 6.2
You can blacklist the client using the following command:
stm add-blacklist-client <mac address>
Once you are on AOS 6.2+, you can run the following command to change the blacklist timer to permanent:
(config) #ap ap-blacklist-time 0
I updated to 6.2 and ran the 1st command and notice it counting down from an hour under Monitoring>Blacklist Clients.. then ran the second command and saved the config and still see the timer counting down
that did it! thanks!
Are there REST APIs to interact with Clearpass server that we can add/remove endpoint to/from blacklist by its IP or MAC address?
Which blacklist are you referring to? This thread is about the controller's blacklist.
I'm interested in a way to blacklist a client on the controller (mimicing the CLI command) via API. The API requires IP address which won't work for us - I'd like to just specify MAC address.
Unfortunately the XML-API on the controller requires an ip address to also blacklist a client. It is a mandatory requirement: http://www.arubanetworks.com/techdocs/ArubaOS_81_Web_Help/Web_Help_Index.htm#ArubaFrameStyles/XML_API/XML_Request.htm%3FTocPath%3DArubaOS%2520User%2520Guide%7CExternal%2520User%2520Management%7C_____3
At Aruba, we believe that the most dynamic customer experiences happen at the Edge. Our mission is to deliver innovative solutions that harness data at the Edge to drive powerful business outcomes.
© Copyright 2021 Hewlett Packard Enterprise Development LPAll Rights Reserved.