Wireless Access

last person joined: 17 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Blocking some traffic to a specific device on IAP

This thread has been viewed 1 times

  • 1.  Blocking some traffic to a specific device on IAP

    Posted May 09, 2017 06:08 PM

    Hi guys,

     

    I am testing some of the features of IAP and I want to block some traffic (for example youtube traffic) to a specific device. I want to block the traffic specifying the IP address of the device. For doing that, on Access Rules > Role-based > New Role Assignment Rule > Attribute I can't find any attribute that references an IP address

     

    IAPRolebased.png

     

    Is there any way of doing that?

     

    Regards,

    Julián



  • 2.  RE: Blocking some traffic to a specific device on IAP

    EMPLOYEE
    Posted May 09, 2017 06:57 PM
    No. You would use user-roles.


  • 3.  RE: Blocking some traffic to a specific device on IAP

    Posted May 10, 2017 05:52 PM

    Hi Tim,

     

    Then, if I want to block the traffic for a specific user, do I select the attribute User-Name maybe?

     

    Regards,

    Julián



  • 4.  RE: Blocking some traffic to a specific device on IAP

    EMPLOYEE
    Posted May 10, 2017 05:57 PM
    You would return that role name in the RADIUS response based on policy.


  • 5.  RE: Blocking some traffic to a specific device on IAP

    Posted May 10, 2017 06:01 PM

    Hi,

     

    But isn't there other way? I am using IAPs with WPA PSK authentication, without using RADIUS servers.

     

    Regards,

    Julián



  • 6.  RE: Blocking some traffic to a specific device on IAP

    EMPLOYEE
    Posted May 10, 2017 06:03 PM
    How are you identifying a user then?


  • 7.  RE: Blocking some traffic to a specific device on IAP

    Posted May 10, 2017 06:17 PM

    Hi,

     

    My test scenario is very simple. I have an IAP broadcasting one SSID and I connect two users/laptops to this SSID using WPA PSK. Now I want to block youtube traffic to only one client. What are the options?

     

    Regards,

    Julián