Wireless Access

Occasional Contributor I

Blocking wireless users

Is there a way to block a specific device from using the wireless network? thanks in advance

MVP Guru

Re: Blocking wireless users


You could blacklist the device or use the UDR and match the mac address of the device to be place in a DENY ROLE

Thank you

Victor Fabian
Lead Mobility Architect @WEI
Guru Elite

Re: Blocking wireless users

You can blacklist the client which will prevent them from fully associating. On each local controller:


stm add-blacklist-client <mac-addr>

 Also, if you want to permantently block the clients (by default, the blacklist ages out), you'll need to run the following command:


(config) #ap ap-blacklist-time 0


| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.

Re: Blocking wireless users

Not sure if the specific diveice which you want to block is wired or wireless. If it is wireless, you can just simple black-list as per prevous comments. if we are talking about any wired deivce that you dont want to access the wireless network.


i would recomment to just put the ACL on the controller uplink to drop the traffic from the device to WLAN on the controller.


Say for example by this way..


Config t

ip access-list session "block device"

any host <ip address of the device> any deny

any any any permit


Map this policy to controller uplink to drop the traffic. Make sure you add any any any permit is added to the below policy.


Thank you.



Contributor I

Re: Blocking wireless users

That's good to know.  For the wired connections though we handled that through cisco but it's good to know we can do the wired ones as well.  Much appreciated:)

Search Airheads
Showing results for 
Search instead for 
Did you mean: