Controllerless Networks

Reply
New Contributor
Posts: 1
Registered: ‎04-02-2013

When detect-adhoc-using-valid-ssid should be raised ?

I'm doing some tests of IDS features on RAP-3WN ( 6.2.1.0-3.4.0.1_39461 ) working as IAP. I know it's the smallest one, but that's the one I was given on Aruba training. I've tested creating ad-hoc network with the SSID same as one advertised by RAP. I've also tried switching STA between RAP an created ad-hoc network. In WIP > Detection I've got "high" on both infrastructure and client, detect-adhoc-using-valid-ssid is enabled. My assumption is alarm should be generated in such conditions, am I wrong ?

 

I've manually set same channel channel on RAP and my "malicious" ad-hoc network. RAP even don't report that network in foreign access points list.

Search Airheads
Showing results for 
Search instead for 
Did you mean: