topic Re: Block a client unleashed cli in Unleashed

Block a client unleashed cli

jside — Wed, 22 Jul 2020 22:19:46 GMT

Hi!

Is it possible to block a client using the Unleashed Cli?
I can block a client using the Unleashed app and I can see there is a no block in the cli:
https://support.alcadis.nl/Support_files/Ruckus/Unleashed//Manuals/Ruckus%20Unleashed%20200.7/Unleas...

But is it possible to block a wireless client using the cli?

Thanks in advance,
/J

Re: Block a client unleashed cli

syamantakomer — Thu, 23 Jul 2020 11:25:23 GMT

Hi Jside,

Blocking a client is only available from GUI and this is as per current design.

Regards,
Syamantak Omer

Re: Block a client unleashed cli

jside — Thu, 23 Jul 2020 17:22:21 GMT

Hi!

Thanks for the reply. I guess it is possible to add an acl entry l2acl, mode deny using the cli, that would essentially be the same?

> l2acl l2acll
>mode deny
>add-mac

Regards, J

Re: Block a client unleashed cli

syamantakomer — Thu, 23 Jul 2020 18:01:06 GMT

Yes, that is possible but this requires mapping of the ACL with the WLAN, unlike blocking a client from Unleashed dashboard (it blocks the client on all the WLAN on system level).

Regards,
Syamantak Omer

Re: Block a client unleashed cli

jside — Thu, 23 Jul 2020 18:35:56 GMT

Hi!

Are you sure about the WLAN mapping?
I'm not specifying any wlan when creating the acl like this:

ruckus(config)# l2acl l2acll
The L2 ACL entry 'l2acll' has been created.
ruckus(config-l2acl)#
ruckus(config-l2acl)# mode deny
The command was executed successfully. To save the changes, type 'end' or 'exit'.
ruckus(config-l2acl)# add-mac 92:5e:49:xx:xx:xx
The station '92:5e:49:xx:xx:xx' has been added to the ACL.

The client is connected to a wlan x

After doing this the client can't access anything and I can't connect to the client using any wlan / vlan

If try to access the client from wlan y it does not work.

I'm thinking since I have not mapped the acl agains any WLAN it will be all?

The reason for me doing this via cli rather than the app is to be able to script block / unblock. It's very useful for blocking the kids from internet when needed, and by scripting I can automatically unblock after a timed period.

Regards J

Re: Block a client unleashed cli

jside — Thu, 23 Jul 2020 19:06:28 GMT

There is also a default ACL called "DenyAccessAll which is modifiable using the cli.
Do you know what that one is about?
When doing a block from the GUI it seems the client is added to the "System" acl which is not modifiable via cli.

Best Regards, Js