Header Only - DO NOT REMOVE - Extreme Networks

Web filtering in Vx9000

  • 21 December 2018
  • 5 replies

Hi ,
I have VX9000 , 30 remote locations working under this controller . Each locations have 4 to 30 APs working .These locations are hospitals . So i configured username for doctors,nurses & others . Then went to wireless client roles , Then created Application policy . but after the save these blocked websites are not be blocked . How can do this perfectly . I hope you hear soon .

  1. How can do web filtering under these users (Doctors , nurses etc ) .
  2. I want to block facebook & youtube for nurses . also some websites too .

5 replies

You need to things to use application visibility and control - enable DPI and use application policy.

#1. Enable DPI on the APs.
profile anyap BRANCH

#2. create the application policy
application-policy corp
deny application youtube precedence 10
deny application Facebook precedence 11

#3. Assign the application policy in the WLAN
wlan corp-wlan
use application-policy corp

You can assign it to the role also, but first make sure that the roles are properly assigned to the wireless clients.
user-role staff
use application-policy corp
Hi ,

Thank you for your reply . i did as per you said . I assigned role for wireless clients too . But not be done .
Now created doctor , nurse , others users with different password .

Can you tell how can do the setup in application policy . Step by step . I tried so many times now but its not blocked .

i hope you hear you soon ....
Ignore the roles first. Follow the 3 steps I mentioned It should disable the applications for the entire WLAN.
That will also help you isolate whether the problem is with the role assignment or the AVC feature.
Should've asked first - which APs are you using ? For 80211ac APs, the feature is natively support on the APs. And can be used with locally bridged traffic.

Secondly, you need to check if the user roles are appropriately being assigned. You can check that in the client statistics.
Hi , i am using AP7632i , All the aps adopted by VX9000 . all the remote locations are working perfectly under Controller . Now remanining these web filtering . DHCP is working in all locations , Just connected to internet router only . Assigned in auto provision policy as different IP range . Ex:,, etc ..