Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

need to block the vrrp packet to the station via RAP5

This thread has been viewed 1 times

  • 1.  need to block the vrrp packet to the station via RAP5

    Posted Oct 19, 2012 03:40 AM

    Hi

     

    Our customer need to block the vrrp packet from Aruba Controller to Wired station via RAP5.

    Controller's and client's VLAN is same VLAN.

    So the Station get the VRRP Multicast packet.

     

    But our customer need to block the packet on the Station.

     

    Do you have any solutions?

     

    We tried, make the ACL and assign the role, but not blocked the VRRP packet.

     

    Kosuke



  • 2.  RE: need to block the vrrp packet to the station via RAP5

    Posted Oct 19, 2012 11:10 PM

    Not sure if you have tried this, but there is the ability to block broadcast traffic to a Wired AP profile.  Have you tried to disable this on the profile that is assigned ot the Ethernet interface on the RAP-5?

     

    Commands:

    config t

    ap wired-ap-profile <profilename>

    no broadcast

     

    or simply uncheck the Broadcast checkbox in the GUI.

     

     



  • 3.  RE: need to block the vrrp packet to the station via RAP5

    Posted Oct 28, 2012 10:46 PM

    Hi clembo,

     

    Thank you for your info.

    I already tried that, but not blocked the VRRP packet.

     

    Kosuke