Users Guide

Dell PowerConnect ArubaOS 5.0 | User Guide Control Plane Security | 383
To delete an entry from the master or local controller whitelist via the WebUI:
1. Access the controller’s WebUI, and navigate to Configuration>Controller.
2. Select the Control Plane Security tab.
3. To delete an entry from the Local controller Whitelist: In the Local Controller List For AP Whitelist Sync
section, click the Delete button by each controller entry you want to remove.
-or-
To delete an entry from the Master Controller Whitelist: In the Master Controller List For AP Whitelist
Sync section, click the Delete button by each controller entry you want to remove.
4. Click Apply to save you settings.
To delete an entry from the master or local controller whitelist via the command-line interface, issue either of the
following commands:
whitelist-db cpsec-master-ctlr-list del mac-address <mac-address>
whitelist-db cpsec-local-ctlr-list del mac-address <mac-address>
Purging the Master or Local Controller Whitelist
There is no need to purge a master controller whitelist during the course of normal operation. If, however, you are
removing a controller from the network, you can purge its controller whitelist after it has been disconnected from
the network. To clear a local controller whitelist entry on a master controller that is still connected to the network,
select that individual whitelist entry and delete it using the delete option described on page 382.
To purge a controller whitelist via the WebUI, use the following procedure:
1. Access the controller’s WebUI, and navigate to Configuration>Controller.
2. Select the Control Plane Security tab.
3. To clear the Local Controller Whitelist: In the Local Controller List For AP Whitelist Sync section, click
Purge.
-or-
4. To clear the Master Controller Whitelist: In the Master Controller List For AP Whitelist Sync section, click
Purge.
To purge a controller whitelist via the command-line interface, issue the following commands:
whitelist-db cpsec-master-ctlr-list purge
whitelist-db cpsec-local-ctlr-list purge
Environments with Multiple Master Controllers
Configuring Networks with a Backup Master Controller
If your network includes a redundant backup master controller, you must synchronize the database from the
primary master to the backup master at least once after all APs are communicating with their controllers over a
secure channel. This ensures that all certificates, IPsec keys and and campus AP whitelist entries are synchronized
to the backup controller. You should also synchronize the database any time the campus AP whitelist changes
(APs are added or removed to ensure that the backup controller has the latest settings.
Master and backup controllers can be synchronized using either of the following methods.
z Manual Synchronization: Issue the database synchronize CLI command in enable mode to manually
synchronize databases from your primary controller to the backup controller.