Wireless Access

last person joined: 17 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Blocking wireless users

This thread has been viewed 6 times
  • 1.  Blocking wireless users

    Posted Apr 17, 2014 11:09 AM

    Is there a way to block a specific device from using the wireless network? thanks in advance



  • 2.  RE: Blocking wireless users

    Posted Apr 17, 2014 11:49 AM

     

    You could blacklist the device or use the UDR and match the mac address of the device to be place in a DENY ROLE



  • 3.  RE: Blocking wireless users

    EMPLOYEE
    Posted Apr 17, 2014 11:49 AM

    You can blacklist the client which will prevent them from fully associating. On each local controller:

     

    stm add-blacklist-client <mac-addr>

     Also, if you want to permantently block the clients (by default, the blacklist ages out), you'll need to run the following command:

     

    (config) #ap ap-blacklist-time 0

     



  • 4.  RE: Blocking wireless users
    Best Answer

    Posted Apr 18, 2014 03:00 AM

    Not sure if the specific diveice which you want to block is wired or wireless. If it is wireless, you can just simple black-list as per prevous comments. if we are talking about any wired deivce that you dont want to access the wireless network.

     

    i would recomment to just put the ACL on the controller uplink to drop the traffic from the device to WLAN on the controller.

     

    Say for example by this way..

     

    Config t

    ip access-list session "block device"

    any host <ip address of the device> any deny

    any any any permit

     

    Map this policy to controller uplink to drop the traffic. Make sure you add any any any permit is added to the below policy.

     

    Thank you.

     

     



  • 5.  RE: Blocking wireless users

    Posted May 12, 2014 05:36 PM

    That's good to know.  For the wired connections though we handled that through cisco but it's good to know we can do the wired ones as well.  Much appreciated:)