Solved: WLC Block Client Association

fdharmawan · ‎09-07-2018

Hi Guys,

On my environment, I want to block several client's MAC addresses. The goal is to prevent those clients to connect to any SSID that are being broadcasted by the WLC.

I did some research. An article said that, it is possible by inserting the MAC addresses to disabled clients list (Security -> Disabled Clients -> Manual Disable). But some other article said that it is possible by inserting the MAC addresses on CLI by issuing "config exclusionlist add 12:34:56:65:43:21" command.

My question is, which one of those two method that will work to prevent the client to connect to any SSID? Or maybe those two methods actually are the same thing?

And if I apply the config, will the AP go down for a while? Like when altering some element on an SSID.

I haven't tested any since my environment is operational 24/7 and I don't have any lab to test or some sort. I just don't want to make a mess by bringing the WiFi down since WiFi is our main connection and the availability of cables are minimal.

Thank you.

Sandeep Choudhary · ‎09-07-2018

Hi,

Information:

Client exclusion might be enabled or disabled on a per-WLAN basis. By default it is enabled with a timeout of 60 seconds.

My question is, which one of those two method that will work to prevent the client to connect to any SSID? Or maybe those two methods actually are the same thing?

You need to disable the clients by adding in the list.

And if I apply the config, will the AP go down for a while? Like when altering some element on an SSID.

no it will not impact to AP.

Info: us etheis command to disbale it: config config <MAC address> Name

Regards

Dont forget to rate helpful posts

View solution in original post

Sandeep Choudhary · ‎09-07-2018

Hi,

Information:

Client exclusion might be enabled or disabled on a per-WLAN basis. By default it is enabled with a timeout of 60 seconds.

My question is, which one of those two method that will work to prevent the client to connect to any SSID? Or maybe those two methods actually are the same thing?

You need to disable the clients by adding in the list.

And if I apply the config, will the AP go down for a while? Like when altering some element on an SSID.

no it will not impact to AP.

Info: us etheis command to disbale it: config config <MAC address> Name

Regards

Dont forget to rate helpful posts

fdharmawan · ‎09-07-2018

Hi Sandeep,

By adding on which list? On the CLI on or the GUI one? Or are those two refers to the same list?

And command that you're talking about, what is that for?

Thank you.

Sandeep Choudhary · ‎09-07-2018

Disable via GUI and command I mentioned in above post are for same purpose.( To block the cliyto associate from any wlan)

Regards

Don't forget to rate helpful posts