topic Blacklist synchronisation on wireless controller in ExtremeWireless (Identifi)

Blacklist synchronisation on wireless controller

Stephan_Harrer — Wed, 15 Jul 2015 14:17:00 GMT

Hello,

I have a question according the client Blacklist on the wireless controller (in the GUI reachable via "AP->Mobile Stations->Whitelist/Blacklist".

Is this Blacklist synchronized between two controllers working as HA-pair?
What is to configure for synchronization?

Thank you for help

Best regards
Stephan Harrer

RE: Blacklist synchronisation on wireless controller

Ronald_Dvorak — Wed, 15 Jul 2015 15:04:00 GMT

Hi Stephan,

I'm not 100% sure but I think the list is synchronized to the 2nd controller.

Synchronization is configured in..
> Controller > Administration > Availability > Synchronization Options
and also in
> VNS > Global > Sync Summary - here you'd also check whether the different services/roles/VNS.. are in sync.

-Ron

RE: Blacklist synchronisation on wireless controller

Gareth_Mitchell — Wed, 15 Jul 2015 17:42:00 GMT

Stephan

This is a new feature in 9.21.01 firmware, you can set it in the same location as before, I added this mac on EWC7 and it appeared on EWC8 (its availability partner.)

:

I created this article for reference: https://gtacknowledge.extremenetworks.com/articles/Q_A/On-the-identifi-wireless-controller-is-the-blacklist-synchronised-to-the-controllers-availability-partner

Best regards

-Gareth

RE: Blacklist synchronisation on wireless controller

JAGADISH_PATIL — Thu, 06 Aug 2015 14:35:00 GMT

how many users can be blacklisted in this option. i mean what is the max limit for this option.

RE: Blacklist synchronisation on wireless controller

Ronald_Dvorak — Thu, 06 Aug 2015 14:51:00 GMT

The max is 768 entries for all platforms....

-Ron

RE: Blacklist synchronisation on wireless controller

JAGADISH_PATIL — Thu, 06 Aug 2015 15:19:00 GMT

Your really champ.. 

Thanks for ur reply.

I would like to know, is it live users or max entries which we can make entry in the table.

In my case we need to add 2500 white-list users mac address in this table which would be white-listed and can be used in the network. Rest users should not get the access.

Thanks
Jagadish Patil

RE: Blacklist synchronisation on wireless controller

Ronald_Dvorak — Thu, 06 Aug 2015 15:48:00 GMT

Nerd would hit the nail on the head 🙂

It's max. entries. So you can't add 2500 MACs.
What you could do is to blacklist/whitlist a whole OUI range i.e. E4:25:E7 = Apple.
That count as a sinble entry and you block/whitelist the whole list.

If that isn't possible in your scenario you'd need to do external MAC auth to a RADIUS with the database of the client MACs.

-Ron