Wireless Access

last person joined: 18 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Block MAC address for our Guest SSID only

This thread has been viewed 4 times

  • 1.  Block MAC address for our Guest SSID only

    Posted Jun 01, 2016 10:04 AM

    Hello Aruba Folks,

    We are looking for an easy way to block certain Apple Macs from joining our guest SSID. Currently for our Windows hosts (the majority of our org) we use a GPO to prevent the selection of our Guest SSID within the Windows Wireless Adapter. Is there a way, based on MAC, to prevent them from associating to a specific Guest SSID? The community says to try to use a MAC Policy and bind it to a user role, but this is not working as expected.

     

    Appreciate the help on this.



  • 2.  RE: Block MAC address for our Guest SSID only

    EMPLOYEE
    Posted Jun 01, 2016 10:05 AM
    How are you authenticating your guest users?



    Is this Instant or controller?


  • 3.  RE: Block MAC address for our Guest SSID only

    Posted Jun 01, 2016 10:17 AM

    L3 Authentication Captive Portal Authentication. Controller.



  • 4.  RE: Block MAC address for our Guest SSID only

    Posted Jun 12, 2016 05:05 AM

    this is kinda difficult as you can't predict which MAC addresses will be used so a black list isn't really an option.

     

    you could look into the device type role derivation, something like that is explained here:

    http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Can-you-define-Policy-based-on-device-type-without-Clearpass/td-p/34407

     

    if you have ClearPass and want to do the checking during the auhtentication and not the associating then you could do that easily.



  • 5.  RE: Block MAC address for our Guest SSID only

    EMPLOYEE
    Posted Jun 01, 2016 10:05 AM
    How are you authenticating your guest users?



    Is this Instant or controller?