Aruba Instant 8.7.0.0 Online Help Center Help Center
You are here: Home > Aruba Instant User Guide > Table of Contents > Blacklisting Unauthorized Users

Blacklisting Unauthorized Users

An unauthorized user can attempt logging in to the Instant AP as an administrator using invalid credentials. Such unauthorized users can be blacklisted and blocked from the network by the administrator. The administrator can configure the count for unsuccessful login attempts, exceeding which the user will be blocked out of the system and the duration for which the user will be blacklisted.

When configured, the unauthorized user's IP address will be blacklisted in the show mgmt-login-blacklist table and will be barred from attempting logins to the network for the time period defined in mgmt-login-blacklist-period. The blacklist maintained for invalid users can contain up to 256 entries. The blacklist will be cleared when the number of entries exceed 256 or in the event of an AP reboot.

Configuring Blacklist for Unauthorized Users

Two parameters should be configured to blacklist an unauthorized user, the number of unsuccessful login attempts allowed and the time duration the unauthorized user should be blacklisted. This can be configured only through the CLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions..

To configure the count for allowed unsuccessful login attempts, before the user is blacklisted, use the following command syntax:

mgmt-login-threshold <1-65535>

The following CLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. commands configure the time period for blacklisting the user:

mgmt-login-blacklist-period <10-65535>, the value is measured in seconds.

(Instant AP) # configure terminal

(Instant AP) # mgmt-login-threshold <1-65535>

(Instant AP) # mgmt-login-blacklist-period <10-65535>

(Instant AP) #exit

The blacklisting feature can be turned off using the no mgmt-login-threshold command.

(Instant AP) # no mgmt-login-threshold

/*]]>*/