Administrator Guide

Field Description
same as the sequence number on the local controller.
l The remote sequence number on a local controller should be the same
as the sequence number on the master controller.
Null Update Count The number of times the controller checked its campus AP whitelist and
found nothing to synchronize with the other controller. The controller
compares its control plane security whitelist against whitelists on other
controllers every two minutes by default. If the null update count reaches
five, the controller sends an “empty sync” heartbeat to the remote controller
to ensure the sequence numbers on both controllers are the same, then
resets the null update count to zero.
Table 24: Master and Local Controller Whitelist Information
In the CLI
To view the master or local controller whitelists via the command-line interface, issue the following commands:
(host)#show whitelist-db cpsec-master-switch-list [mac-address <mac-address>]
(host) #show whitelist-db cpsec-local-switch-list [mac-address <mac-address>]
Deleting an Entry from the Master or Local Controller Whitelist
You do not need to delete a master controller from the master controller whitelist during the course of normal
operation. However, if you remove a local controller from the network, you should also remove the local
controller from the local controller whitelist on the master controller. If the local controller whitelist contains
entries for controllers no longer on the network, then a campus AP whitelist entry can be marked for deletion
but is not physically deleted, as the controlleris waiting for an acknowledgment from another controller no
longer on the network. This can increase network traffic and reduce memory resources on the controller.
In the WebUI
To delete an entry from the master or local controller whitelist:
1. Navigate to Configuration > Controller.
2. Select the Control Plane Security tab.
3. To delete an entry from the Local Controller Whitelist: In the Local Switch List For AP Whitelist Sync
section, click the Delete button by each controller entry you want to remove.
Or,
To delete an entry from the Master Controller Whitelist: In the Master Switch List For AP Whitelist Sync
section, click Delete by each controller entry you want to remove.
4. Click Apply.
In the CLI
To delete an entry from the master or local controller whitelist:
(host) #whitelist-db cpsec-master-switch-list del mac-address <mac-address>
(host) #whitelist-db cpsec-local-switch-list del mac-address <mac-address>
Dell Networking W-Series ArubaOS 6.4.x | User Guide Control Plane Security | 134