cancel
Showing results for 
Search instead for 
Did you mean: 

Block Android devices in one SSID

juan_6469136
New Contributor II
Hi, I have a 1100 Zonedirector with 10 7772 APs with WPA security.

I want to block only the Android devices, but When I make a new "Device Access Policy" in Configure-> Access Control menu: I created new policy with this optións:

Default Action if no rule is matched: Allow all by default
Order Description OS/Type Type Uplink Downlink VLAN Action
1 Android Deny DISABLE DISABLE

And now I go to configure->WLAN and choosing the SSID and in advanced option I active the Device Policy called "Block Andoid Devices".

I can see that the Android Devices are Blocked: Authorized (Blocked), but not only Android devices, this is the problem. There are many other devices With Windows 7 that are blocked. (The zonedirector can ́t read the Operatim System od the the device, it ́s blank).

PD: The 1100 Zonedirector is in 9.6 firmware. Thanks.

Image_ images_messages_5f91c3e4135b77e2478cde14_f6221815b5478e51328acae4d8749189_Ruckus1_inline-63653fde-35cd-46a9-b9ba-160eea8173f0-284223720.png1396264196 Image_ images_messages_5f91c3e4135b77e2478cde14_722256f593669be7f1fab4a0ef544f85_Ruckus2_inline-1bc7a663-b07d-4dd8-914b-22fcc1484241-1753831860.png1396264212
6 REPLIES 6

jennifer_rogers
New Contributor
This is very cumbersome issue. I am running into the same issue trying to use access control but we have a group of scanners and printers that are static ips. I have found that if they join the wireless once as dhcp then set it back to static, the dhcp information is in zone director and then the rules apply.

How hard is it to make the rule "Default Action if no rule is matched: Allow all by default " allow items with no information to connect.

keith_redfield
Valued Contributor II
If we did that, then it would be trivial to avoid the block by simply assigning your own device a static IP.

I think a better solution is to have your DHCP server assign reserved IP addresses vs statically assigning the devices themselves. This gives you the best of both worlds and centralizes IP management as well.