Disable client by MAC address from the command line

[spfister336]

We have a 5520 WLC. Is it possible to disable a client by MAC address from the command line? I know I've done it in the GUI before, but I need to have a way to do it via command line (need to do it from a python script). The WLC is running version 8.10.151.0

[Tony Rosolek]

You can try: 

(Cisco Controller) >config client deauthenticate ?

<MAC addr | IPv4/6 addr | user name> Enter a Client's information on anyone (OR) of parameters <MAC address | IPv4/v6 address | user name>.

(Cisco Controller) >config client deauthenticate 

[spfister336]

Wouldn't this just disconnected them? I was really looking for something to disable them indefinitely..

[Tony Rosolek]

Yes, you are right, it only disconnects/deauthenticates the client, which then can directly connect again. If you want to block it permanently you can try following command. 

(Cisco Controller) >config exclusionlist ?

add Creates a local exclusion-list entry.
delete Deletes a local exclusion-list entry.
description Sets the description for an exclusion-list entry.

(Cisco Controller) >config exclusionlist add ?

<MAC addr> Enter MAC address.

(Cisco Controller) >config exclusionlist add aa:bb:cc:aa:bb:cc

[spfister336]

Thank you... I did see the 'config exclusionlist' command, but I was confused. Doesn't that have a timeout value (default 60)? I may be confusing it with something else.