How to: Check/Enable/Disable Cisco Controller (Access Point) Client Exclusion Policy settings (Mobility Express) via Controller Console

Last Updated on

Types of Client Exclusion Policies for Mobility Express Controller

Excessive 802.11 Association Failures—Clients are excluded on the sixth 802.11 association attempt, after five consecutive failures.
Excessive 802.11 Authentication Failures—Clients are excluded on the sixth 802.11 authentication attempt, after five consecutive failures.
Excessive 802.1X Authentication Failures—Clients are excluded on the fourth 802.1X authentication attempt, after three consecutive failures.
IP Theft or IP Reuse—Clients are excluded if the IP address is already assigned to another device.
Excessive Web Authentication Failures—Clients are excluded on the fourth web authentication attempt, after three consecutive failures. [1]

How to: Check current Client Exclusion Policy settings for Mobility Express Controller

1 Connect to the Mobility Express controller via console or SSH

Cisco Mobility Express Controller via SSH
Cisco Mobility Express Controller via SSH

(Use “show exclusionlist” to check excluded users )

show exclusionlist
show exclusionlist
show exclusionlist

2 Use “show wps summary” to show current Client Exclusion Policies

show wps summary
show wps summary
show wps summary

How to: Modify/Change Client Exclusion Policies for Mobility Express Controller

To disable “Excessive 802.11-association failures”

config wps client-exclusion 802.11-assoc disable

To enable “Excessive 802.11-association failures”

config wps client-exclusion 802.11-assoc enable

To enable/disable Excessive 802.11-authentication failures

config wps client-exclusion 802.11-auth {enable | disable}

To enable/disable Excessive 802.1x-authentication

config wps client-exclusion 802.1x-auth {enable | disable}

To enable/disable IP-theft

config wps client-exclusion ip-theft {enable | disable}

To enable/disable Excessive Web authentication failure

config wps client-exclusion web-auth {enable | disable}

Resources

Cisco Wireless LAN Controller Configuration Guide, Release 7.4 [1]


Leave a Reply

Your email address will not be published. Required fields are marked *