SCG200 - How can I block traffic through DataPlane SCG-D1

Question

How can I block traffic by Data Plane1Friends,We are working with SCG200, and have set up a new Datapla. I would like to know how do I block DP-0 traffic, forcing the new Data plane (DP-1) to take over?I've tried ACL without success.I have already tried via the command line, both in the AP, and in the CLI of the SCG, also to no avail.CLI-AP:

set tunnelmgr : set tunnelmgr {options}

-> disable/enable

-> tunnel

-> type  [mode comcast]

-> auth

-> port

ü 
rkscli: set tunnelmgr SCG-D Sorry, no match
to set tunnelmgr SCG-D found

ü 
rkscli: set tunnelmgr SCG-D 1Sorry, no
match to set tunnelmgr SCG-D 1 found

------------------------------------------------------------------------------------

ARC-RJ-WLC-R08# remote ap-cli D4:68:4D:10:11:00
"set tunnelmgr port SCG-D0 disable"

Error: parameter error -- Agrument must be digits

ARC-RJ-WLC-R08# remote ap-cli D4:68:4D:10:11:00
"set tunnelmgr SCG-D0 disable"

Error: parameter error -- Agrument must be digits

ARC-RJ-WLC-R08# remote ap-cli D4:68:4D:10:11:00
"set tunnelmgr port SCG-D0 port disable"

Error: parameter error -- Agrument must be digits

ARC-RJ-WLC-R08# remote ap-cli D4:68:4D:10:11:00
"set tunnelmgr SCG-D0 disable"

Error: parameter error -- Agrument must be digitsAny tips?"get tunnelmgr"------ TUNNELMGR Information ------tunnelmgr Service:      EnabledTunnel Establishment:   EnabledTunnel Authentication:  EnabledTunnel Cipher:          DisabledPMTU Discovery:         EnabledNode Affinity:          DisabledForce Fragmentation:    DisabledTunnel Type: Ruckus-GRESCG-D IP List:       =1@[x.x.x.x]:23233,[y.y.y.y]:23233Internal Subnet:        10.x.0.0GRE over UDP: AP/SCG-D UDP port # 23233/23233Keep Alive Interval/Retry-limit: 10/6Keep Alive Interval2: N/A

unknown · Answer

Hello. You can use ACL on AP to do the same. It will work. #AP CLI script#define Zone's AP FW versionfw_version=3.2.1.0.682#define Model class, only all is supported now.model=all#CLI commandsset qos eth0 ip add ucast src  192.168.100.105/255.255.255.255 drop

unknown · Answer

Gentlemen,Sorted out.I configured an extended ACL on my router, blocking the IP of the DTP0.Then when I ran the "get tunnelmgr" command, and the failover worked, that is, I could only see the traffic / tunnel of the new dataplane

unknown · Answer

Hello Genrikh,  Thanks for the quick response.I saw it, I searched it here in support Ruckus, but this feature is only working on vSZ.http://docs.ruckuswireless.com/smartzone/3.6.1/sz100-vsze-administrator-guide/GUID-508F58A7-0642-4F2...

Thanks!