Block a client unleashed cli

  • 1
  • Question
  • Updated 2 months ago
Hi!

Is it possible to block a client using the Unleashed Cli?
I can block a client using the Unleashed app and I can see there is a no block in the cli:
https://support.alcadis.nl/Support_files/Ruckus/Unleashed//Manuals/Ruckus%20Unleashed%20200.7/Unleas...

But is it possible to block a wireless client using the cli?

Thanks in advance,
/J

Photo of Jside

Jside

  • 7 Posts
  • 1 Reply Like

Posted 2 months ago

  • 1
Photo of Syamantak Omer

Syamantak Omer, Official Rep

  • 473 Posts
  • 155 Reply Likes
Hi Jside,

Blocking a client is only available from GUI and this is as per current design.

Regards,
Syamantak Omer
Photo of Jside

Jside

  • 7 Posts
  • 1 Reply Like
Hi!

Thanks for the reply. I guess it is possible to add an acl entry l2acl, mode deny using the cli, that would essentially be the same?

> l2acl l2acll
>mode deny
>add-mac <mac of client to be blocked>

Regards, J
Photo of Syamantak Omer

Syamantak Omer, Official Rep

  • 459 Posts
  • 148 Reply Likes
Yes, that is possible but this requires mapping of the ACL with the WLAN, unlike blocking a client from Unleashed dashboard (it blocks the client on all the WLAN on system level).

Regards,
Syamantak Omer
Photo of Jside

Jside

  • 7 Posts
  • 1 Reply Like
Hi!

Are you sure about the WLAN mapping?
I'm not specifying any wlan when creating the acl like this:

ruckus(config)# l2acl l2acll
The L2 ACL entry 'l2acll' has been created.
ruckus(config-l2acl)#
ruckus(config-l2acl)# mode deny
The command was executed successfully. To save the changes, type 'end' or 'exit'.
ruckus(config-l2acl)# add-mac 92:5e:49:xx:xx:xx
The station '92:5e:49:xx:xx:xx' has been added to the ACL.

The client is connected to a wlan x

After doing this the client can't access anything and I can't connect to the client using any wlan / vlan

If try to access the client from wlan y it does not work.

I'm thinking since I have not mapped the acl agains any WLAN it will be all?

The reason for me doing this via cli rather than the app is to be able to script block / unblock. It's very useful for blocking the kids from internet when needed, and by scripting I can automatically unblock after a timed period.

Regards J
Photo of Jside

Jside

  • 7 Posts
  • 1 Reply Like
There is also a default ACL called "DenyAccessAll which is modifiable using the cli.
Do you know what that one is about?
When doing a block from the GUI it seems the client is added to the "System" acl which is not modifiable via cli.

Best Regards, Js