topic Re: Disable client by MAC address from the command line in Wireless

Disable client by MAC address from the command line

spfister336 — Thu, 30 Sep 2021 19:44:41 GMT

We have a 5520 WLC. Is it possible to disable a client by MAC address from the command line? I know I've done it in the GUI before, but I need to have a way to do it via command line (need to do it from a python script). The WLC is running version 8.10.151.0

Re: Disable client by MAC address from the command line

Tony Rosolek — Thu, 30 Sep 2021 20:53:07 GMT

You can try:

(Cisco Controller) >config client deauthenticate ?

<MAC addr | IPv4/6 addr | user name> Enter a Client's information on anyone (OR) of parameters <MAC address | IPv4/v6 address | user name>.

(Cisco Controller) >config client deauthenticate

Re: Disable client by MAC address from the command line

spfister336 — Thu, 30 Sep 2021 21:01:15 GMT

Wouldn't this just disconnected them? I was really looking for something to disable them indefinitely..

Re: Disable client by MAC address from the command line

Tony Rosolek — Thu, 30 Sep 2021 21:54:37 GMT

Yes, you are right, it only disconnects/deauthenticates the client, which then can directly connect again. If you want to block it permanently you can try following command.

(Cisco Controller) >config exclusionlist ?

add Creates a local exclusion-list entry.
delete Deletes a local exclusion-list entry.
description Sets the description for an exclusion-list entry.

(Cisco Controller) >config exclusionlist add ?

<MAC addr> Enter MAC address.

(Cisco Controller) >config exclusionlist add aa:bb:cc:aa:bb:cc

Re: Disable client by MAC address from the command line

spfister336 — Fri, 01 Oct 2021 16:00:07 GMT

Thank you... I did see the 'config exclusionlist' command, but I was confused. Doesn't that have a timeout value (default 60)? I may be confusing it with something else.