Wireless Access

 View Only
last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Illegal WIFI access

This thread has been viewed 25 times

  • 1.  Illegal WIFI access

    Posted Oct 03, 2022 03:03 AM
    I have been getting this on my clearpass since 2 days ago.
    is this considered as illegal access ?
    how do i block them ?


  • 2.  RE: Illegal WIFI access

    EMPLOYEE
    Posted Oct 03, 2022 03:15 AM
    It could be a misconfigured client or a device that has an expired password so you should attempt to locate it, so it can be fixed.
     
    If all else fails, you can see the "calling-station-id" (mac address) in clearpass and blacklist that client on the controller.

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    HPE Design and Deploy Guides: https://community.arubanetworks.com/support/migrated-knowledge-base?attachments=&communitykey=dcc83c62-1a3a-4dd8-94dc-92968ea6fff1&pageindex=0&pagesize=12&search=&sort=most_recent&viewtype=card
    ------------------------------

    Original Message


  • 3.  RE: Illegal WIFI access

    Posted Oct 03, 2022 03:23 AM
    how do i blacklist from clearpass ?
    Original Message


  • 4.  RE: Illegal WIFI access

    EMPLOYEE
    Posted Oct 03, 2022 03:29 AM
    Clearpass has a "blacklist" but it is automatic based on bandwidth or time restrictions, so that would not help here.  You would have to blacklist that device on the Wireless LAN controller.

    EDIT:  To be honest, some people would want to be able to observe clients that are malfunctioning so it make it easier to deal with them later.  Blacklisting on the wireless lan controller could make it more difficult, unless looking at the blacklist is part of your troubleshooting mechanism when users complain.

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    HPE Design and Deploy Guides: https://community.arubanetworks.com/support/migrated-knowledge-base?attachments=&communitykey=dcc83c62-1a3a-4dd8-94dc-92968ea6fff1&pageindex=0&pagesize=12&search=&sort=most_recent&viewtype=card
    ------------------------------

    Original Message


  • 5.  RE: Illegal WIFI access

    Posted Oct 03, 2022 03:35 AM
    so how do i blacklist on the wireless controller?
    i don't see any option to block MAC address
    Original Message


  • 6.  RE: Illegal WIFI access

    EMPLOYEE
    Posted Oct 03, 2022 03:42 AM
    If a user does not appear in the user table, you must blacklist using the commandline in the controller with the "stm add-blacklist-client" command.

    Please see here:  https://www.arubanetworks.com/techdocs/CLI-Bank/Content/aos8/stm.htm#stm_538996758_1121064

    The client will then show up in the dashboard under security> blacklist/denylist clients

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    HPE Design and Deploy Guides: https://community.arubanetworks.com/support/migrated-knowledge-base?attachments=&communitykey=dcc83c62-1a3a-4dd8-94dc-92968ea6fff1&pageindex=0&pagesize=12&search=&sort=most_recent&viewtype=card
    ------------------------------

    Original Message


  • 7.  RE: Illegal WIFI access

    Posted Oct 03, 2022 03:46 AM
    thanks. this works for me.
    the reject alerts on the clearpass has stopped.
    Original Message