Controllerless Networks

New Contributor

Prevent 315 Guest Traffic from accessing Production Network

I have two Aruba 315 APs configured with two SSIDs. The internal production SSID is recieving it's DHCP from our internal network and the Guest SSID is recieving it directly from the virtual controller. 


I understand there are ways to block access to scopes using rules within the virtual controller's menus (ie Deny all traffic to When I implement these rules it blocks all internet traffic. Allowing exceptions for http/https traffic allows users to access any servers and appliances with network interfaces.


Is there a way to block this traffic and still allow http/https traffic to our gateway with some sort of exception?

Guru Elite

Re: Prevent 315 Guest Traffic from accessing Production Network

Can you please print the rules you tried?  You typically want to allow dns and dhcp to anywhere before any rules.

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.4 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Aruba Central Documentation
Sign up for Security Alerts
Aruba Technical Webinars
Search Airheads
Showing results for 
Search instead for 
Did you mean: