Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Disable Stateful Firewall completely for a SSID/Virtual AP?

This thread has been viewed 2 times
  • 1.  Disable Stateful Firewall completely for a SSID/Virtual AP?

    Posted Apr 11, 2018 06:21 AM

    Is it possible to disable the Firewall Functionality for a single SSID/Virtual AP completely (individually)?

    (Currently Running 6.4.4.16)



  • 2.  RE: Disable Stateful Firewall completely for a SSID/Virtual AP?
    Best Answer

    EMPLOYEE
    Posted Apr 11, 2018 07:24 AM

    - You would have to configure the assigned role to have only the "allowall" ACL

     

    Roles are configured under Configuration> Wireless > Security> Access Control.

     

    Having a firewall policy is an integrated part of the infrastructure and it cannot be just removed; it must be made more permissive.

     

     

     



  • 3.  RE: Disable Stateful Firewall completely for a SSID/Virtual AP?

    Posted Apr 12, 2018 05:33 AM

    Hello Colin,

    thanks - ok, that does what i was looking for!

     

    Of course you normally wouldn't want to do so in general.

    But i want to create a completely "open" SSID, for an isolated VLAN that's only tunneled through the network to a dedicated gateway with no other connections possible whatsoever (also inter-user-traffic in that net is being denied).

    I only care about bandwidth / usage, any further security issues (access-control, firewalling etc.) have to be dealt with behind that gateway (and they are)!