Controller Based WLANs

What types of impersonation detection are supported by ArubaOS 6.0 with WIDS 2.0?

by on ‎07-03-2014 10:45 AM

Product and Software This article applies to all Aruba controllers and ArubaOS 6.0 and later.


ArubaOS 6.0 with WIDS 2.0 supports the following two types of impersonation detection. The impersonation detection feature works only in AP-mode.

AP Spoofing

 

  • Attacker spoofs the AP's BSSID.
  • Can be detected if the AP sees frames with SA that match one of its BSSIDs, but it did not transmit them.
  • Can be detected if the AP sees that a client is sending frames to it on a different channel.

Premature EAP Success/Failure Attack Detection

 

  • Attacker spoofs EAP success/failure messages to disrupt the authentication state of the clients and prevent the client from connecting to the valid APs.
  • The EAP-Success/EAP-Failure frames have been added to the list of the frame types that Aruba APs will examine.
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.