Clients

The Clients page provides a list view of all the access point (AP), switch, or gateway clients connected to the network. You can filter clients based on the network the clients are connected to. The page displays key client information and also allows you to view a specific client detail page.

The client monitoring features in the List and Summary pages run on the Foundation license that is auto-assigned for the AP, switch, and gateway. For more information, see Aruba Central Licenses Feature Details.

For monitoring clients connected to an Aruba Switch, the client entry is displayed in the All Clients page only if the client is connected to one of the following supported Aruba Switches:

Aruba 2530 Switch Series (applies to wired authenticated clients only)
Aruba 2540 Switch Series
Aruba 2920 Switch Series
Aruba 2930F Switch Series
Aruba 2930M Switch Series
Aruba 3810 Switch Series
Aruba 5400R Switch Series
Aruba CX Switch Series

The clients dashboard is displayed when the filter is set to one of the options under groups, labels, sites, or Global. For information about all the available menu items, see The Client Dashboard.

For wired devices, client usage will only be displayed in Aruba Central if there is a single device on the switch port. If there are multiple devices on the same port client usage will not be displayed.
For wireless devices, regardless of the number of devices on the switch port, client usage details will be displayed.
The number of clients on the AOS-CX switch port is limited to a maximum of 25. If the client count exceeds this limit, then the clients are not displayed on the port.
Interface and client messages coming from the AOS-CX switch are throttled at Aruba Central for a specific threshold over a configured duration of time. When a particular interface or client exceeds this threshold, it is considered chatty, and further updates from that interface or client are ignored by AOS-CX switch monitoring in Aruba Central for the configured duration of time. During the throttled period of time, the Aruba Central UI may show outdated data for the affected interfaces or clients.

Viewing a List of Clients

To view the list of clients connected, complete the following steps:

In the Aruba Central app, set the filter to one of the options under groups, labels, or sites. For all devices, set the filter to Global.
The dashboard context for the selected filter is displayed.
Under Manage, click Clients. The clients overview page is displayed in List view.
The All Clients page is displayed. The clients overview page is displayed in List view. By default, the Clients table displays a unified list of clients.
The list of clients is populated for a time range of 3 hours. To view the list of clients for a different time range, click the Time Range Filter and select the required time period. Total data usage for the selected time period is displayed above the client summary bar.
To filter clients based on the device to which the clients are connected, select the device type from the Clients drop-down list:

All—Displays a list of all the clients connected to the network.
AP—Displays a list of clients connected to the AP.
Switch—Displays a list of clients connected to the switch.
Gateway—Displays a list of clients connected to the gateway.

To filter clients based on the network to which the clients are connected, click the network type from the Client Summary bar:

All—Displays a list of all the clients connected to the network.
Wireless—Displays a list of clients connected to the wireless network. The wireless clients are denoted by the icon.
Wired—Displays a list of clients connected to the wired network. The wired clients are denoted by the icon.
Remote—Displays a list of clients connected through VPN Virtual Private Network. VPN enables secure access to a corporate network when located remotely. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security, and management policies of the private network. This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two.. The remote clients are denoted by the icon.

To filter the clients based on the state of connectivity, click the connectivity type from the Client Summary bar:

Connecting—Displays a list of client connections that are in progress.
Connected—Displays a list of clients that are successfully connected to the network.
Failed—Displays a list of all failed client connections.
Offline—Displays a list of all offline clients.
Blocked —Displays a list of all blocked clients.

The Clients table lists the details of each client. By default, All clients is selected and the table displays the following columns: Client Name, Status, IP Address, VLAN, Connected To, SSID/Port, AP Role, Gateway Role, and Health. The default columns displayed is different and contextual based on AP, switch, and gateway.

After upgrading the Aruba Central instance to the 2.5.4 release, the existing user preferences are not retained in the Clients table and the table displays only default columns. You must reconfigure the columns as per your requirement.

The following functions are available in the table:

Click to download the client details in the .csv file format.
Click to select more columns or reset the table view to the default columns.
- If a filter icon appears next to the column header, click and enter the filter criteria or select a filter criteria. For example, to search a client, click the predefined filter criteria: Connecting Connected, Offline, Failed, or Blocked from the Client Summary bar and in the Client Name column enter the name of the client.
To disconnect a wireless client, hover over the corresponding wireless client and click Disconnect from AP. For more details, see Disconnecting a Wireless Client from an AP.

Aruba Central provides a near-instant refresh of the client status if the client is connecting or connected to an access point. For more information, see Client Status Changes.

The following animation shows you the clients list view in Aruba Central.

Table 1: All Client Details
Column Names	Applicability	Description
Client Name	All AP Switch Gateway	Username, hostname, or MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address of the client. Click the client name to view the Summary page.
Status	All AP Switch Gateway	Client connection status. Use the filter option to view the following: Connecting—Applicable only for wireless clients. Connected—Applicable for all client types. Offline—Applicable for all client types. Failed—Applicable only for wireless clients. Blocked—Applicable only for wireless clients. Hover the cursor over the status column to view a pop-up summary based on the connection status. The status summary is populated based on the status type. Each status type and the summary is described below: Connecting: Client name—Name of the client. Last Seen Time—Date and time the client was last connected. Connected: Client name—Name of the client. Authentication—Type of authentication. Displays the authentication label only for authenticated clients. IP address—Client IP address. Connected Since—Date and time at which the client was connected. Failure Stage—Stage of the connection where the client failed to connect. It is not applicable for the wired clients, so displayed as NA. Health Score—Device health. Connected Device Port—The device port that the wired client is connected to. Failed: Client name—Name of the client. Last Seen Time—Date and time the client was last connected. Failure Stage—Stage of the connection where the client failed to connect. Failure Reason—Reason for the connection failure. Offline: Client name—Name of the client. Authentication—Type of authentication. Displays the authentication label only for authenticated clients. IP address—Client IP address Connected Since—Date and time at which the client was connected. Last Seen Time—Date and time the client was last connected. Failure Stage—Stage of the connection where the client failed to connect. Connected Device Port—The device port that the wired client is connected to. Blocked: The values available for clients that are blocked when in failed status, offline status, dynamically blocked, or if a new client is blocked is as follows: Client name—Name of the client. Last Seen Time—Date and time the client was last connected. The values available for clients that are blocked when in connected status is as follows: Client name—Name of the client. Authentication—Type of authentication. Displays the authentication label only for authenticated clients. IP address—Client IP address Connected Since—Date and time at which the client was connected. Last Seen Time—Date and time the client was last connected.
IP Address	All AP Switch Gateway	IP address of the client.
VLAN	All AP Switch Gateway	VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. of the device to which the client is connected.
Connected To	All	AP name, Switch name, or Gateway name. This is the first layer 2 hop for the client. If the device does not have a name, the MAC address is displayed.
AP Role	All AP	Role assigned by the AP.
Gateway Role	All Gateway	Role assigned by the Aruba Gateway.
Health	All AP	Client health. The value can be one of the following: Poor—0-30 Fair—31-70 Good—71-100
SSID/Port	All AP Switch Gateway	Displays the SSID Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. for wireless clients and the port number for wired clients. The column title displays SSID and Port interchangeably based on the device filters. For APs, the column title displays SSID. For switch and gateway, the column title displays Port.
AI Insights	All AP	The total number of AI Artificial intelligence (AI) is the simulation of human intelligence processes by machines, especially computer systems. AI reduces trouble tickets by identifying the network entity that is facing problems through event correlation and root cause analysis. insights generated for the client.
Switch Role	All Switch	Role assigned by the Aruba switch.
Failure Stage	All AP	Failure status of the client that failed to connect. The failure reasons could be: Association failure MAC authentication failure 802.1X 802.1X is an IEEE standard for port-based network access control designed to enhance 802.11 WLAN security. 802.1X provides an authentication framework that allows a user to be authenticated by a central authority. authentication failure Key exchange failure DHCP Dynamic Host Configuration Protocol. A network protocol that enables a server to automatically assign an IP address to an IP-enabled device from a defined range of numbers configured for a given network. failure Captive Portal A captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users. failure
Group Name	All AP Switch Gateway	Displays the name of the group that the device is connected to. The Connected To column displays the device name that the client is connected to.
Site Name	All AP Switch Gateway	Displays the name of the site that the device is connected to. The Connected To column displays the device name that the client is connected to.
MAC Address	All AP Switch Gateway	MAC address of the client. NOTE: The filter criteria supports all delimiters in the MAC address. For example, if you search a MAC address with a comma, it is automatically converted to semicolon and the corresponding result is displayed.
Hostname	All AP Switch Gateway	Host name of the client.
User Name	All AP Switch Gateway	Username of the client.
Key Management	All AP	Security mode used by the client.
Authentication	All AP Switch Gateway	Authentication type used by the client to connect with the device.
Global Unicast IPv6 Address	All AP Gateway	When the IPv6 address is present for a client, you can view its Global Unicast IPv6 address. Click the ellipsis and select the column to view the value if the column is not displayed.
Link Local IPv6 Address	All AP Gateway	When the IPv6 address is present for a client, you can view its Link Local IPv6 address. Click the ellipsis and select the column to view the value if the column is not displayed.
Capabilities	All AP	Client 802.11 802.11 is an evolving family of specifications for wireless LANs developed by a working group of the Institute of Electrical and Electronics Engineers (IEEE). 802.11 standards use the Ethernet protocol and Carrier Sense Multiple Access with collision avoidance (CSMA/CA) for path sharing. capabilities.
Usage	All AP Switch Gateway	Total data usage for the selected time period.
Last Seen Time	All AP Switch Gateway	Date and time when the client was last seen.
Connected Since	All AP Switch Gateway	Date and time since when the client was connected.
AP Name	All AP	Name of the AP.
AP Mac Address	All AP	MAC address of the AP.
Channel/Band	All AP	Last connected channel and band Band refers to a specified range of frequencies of electromagnetic radiation..
Switch Name	All Switch	Name of the switch.
Port	All Switch Gateway	Port number of the switch.
Gateway Name	All Gateway	Name of the Aruba Gateway.
Tunneled	All AP Switch Gateway	Specifies if the client is present in a tunneled network or not. The value can be one of the following: Yes No Displays Yes or No for the following tunnel types: UBT User-Based Tunneling. UBT allows you to redirect specific wired users traffic from the switches to the Gateway to enforce DPI and firewall functionality, application visibility, and bandwidth control offered by Aruba Gateway. PBT Overlay
Segmentation	All AP Switch Gateway	Type of segmentation. The type of segmentation can be: None UBT PBT Overlay NOTE: To view the details of an Overlay tunnel, the AP and VPNC must be licensed in the same Aruba Central account. To view the details about dynamic segmentation, a gateway and switch must be licensed in Aruba Central.
Client Category	All AP Gateway	Displays the category of the profiled device. For example, Access Points, Computer, Smart Device, VoIP Voice over IP. VoIP allows transmission of voice and multimedia content over an IP network. phone, and so on. For more information, see Classifying Clients.
Client Family	All AP Gateway	Displays the type of operating system or vendor. For example, if the client category is Computer, the client family can be Windows, Linux, or Apple Mac. For more information, see Classifying Clients.
Client OS	All AP Gateway	Displays the operating system that the device runs on. For example, if the client category is Computer and the client family is Windows, the client OS can be Windows or Windows 8/10. For more information, see Classifying Clients.

Table 2: Classification of Devices Connected to AOS-CX Switches:
Device Type (based on LLDP)	Is the Device Listed in Clients or neighbors Tab?
Switch (AOS-S or AOS-CX)	Neighbors
Router	Neighbors
WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection.	Neighbors
Telephone	Clients
Station	Clients
No LLDP Link Layer Discovery Protocol. LLDP is a vendor-neutral link layer protocol in the Internet Protocol suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, which is principally a wired Ethernet. (applies to CDP Cisco Discovery Protocol. CDP is a proprietary Data Link Layer protocol developed by Cisco Systems. CDP runs on Cisco devices and enables networking applications to learn about the neighboring devices directly connected to the network. neighbors as well)	Clients
LLDP device source interface is part of a LAG Link Aggregation Group . A LAG combines a number of physical ports together to make a single high-bandwidth data path. LAGs can connect two switches to provide a higher-bandwidth connection to a public network. port	Neighbors

The LLDP capabilities Telephone/Station have higher precedence when multiple capabilities are present.