Security

How do I blacklist a client on Aruba OS 8?

Hi, 

You can use the command " #stm add-blacklist-client <client-mac> to blacklist a client. To verify, use "show ap blacklist-clients". 

Example, 

(Rajaguru-INFINITY-MM) [mynode] #stm add-blacklist-client 22:22:22:22:22:22 
<cr>
(Rajaguru-INFINITY-MM) [mynode] #stm add-blacklist-client 22:22:22:22:22:22
(Rajaguru-INFINITY-MM) [mynode] #
(Rajaguru-INFINITY-MM) [mynode] #show ap blacklist-clients
Blacklisted Clients
-------------------
STA reason block-time(sec) remaining time(sec)
--- ------ --------------- -------------------
11:11:11:11:11:11 user-defined 80 3520
22:22:22:22:22:22 user-defined 5 3595
(Rajaguru-INFINITY-MM) [mynode] #

Is available in the web ui? 

>in MM node navigate to Configuration > Auth > L2-Auth

>select the dot1x auth. profile from  the list.

>Enter a value for number of auth. failures before blacklist at Max auth. failure option.

> click on submit.

Find the screen shot attached one.

Is it still possible to make the blacklist permante?  Ive attempted 

ap ap-blacklist-time 0

But get an error.

You can set the blacklist timers in the VAP. The timer named "Blacklist Time" applies to manual blacklisted clients too.

I don't know of a way to set different timers to individual clients. I don't think that's possible.

Edit: To answer your question, set the blacklist time in the VAP profile to 0 to make it permanent.