Higher Education

Reply
This is an open group. Sign in and click the "Join Group" button to become a group member and start posting.
Highlighted
Occasional Contributor II
Posts: 16
Registered: ‎01-02-2013
Stolen Devices - Alert when seen again?

Is it possible to have CPPM or Airwave or even a controller alert when a MAC address connects?  I think this would be very handy in tracking down stolen devices - if someone was stupid enough to bring it back on campus. 

 

Thanks,
Chris

Guru Elite
Posts: 8,456
Registered: ‎09-08-2010
Re: Stolen Devices - Alert when seen again?
Do you have AirWave?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 1,422
Registered: ‎10-25-2011
Re: Stolen Devices - Alert when seen again?
You can create a trigger in Airwave if you have it
Pasquale Monardo | Senior Network Solutions Consultant
ACDX #420 | ACMP
[If you found my post helpful, please give kudos!]
MVP
Posts: 500
Registered: ‎04-03-2007
Re: Stolen Devices - Alert when seen again?
In Airwave, System > Triggers and create one for "Connected Clients". Add 1 or more mac addresses to the list.

- Ryan -
==========
Ryan Holland, ACDX #1 ACMX #1
The Ohio State University
Occasional Contributor I
Posts: 26
Registered: ‎01-07-2013
Re: Stolen Devices - Alert when seen again?

We have a trigger set up in Airwave to alert when a MAC address connects.  The type should be set as Connected Clients.  We have our connection mode as any so if the client connects as wired or wireless we will get the alert.  You can also set the severity  of the trigger.  You can also restrict the trigger to certain parts of your netowrk depending on how you have set up Airwave. We do just an email alert but you can also send a notification to an NMS.  

Contributor II
Posts: 143
Registered: ‎05-12-2010
Re: Stolen Devices - Alert when seen again?

You can definitely do that in Airwave by setting a trigger.We require a report to be filed with our campus police before we will add an alert.  We add the police report and IT ticket information in the trigger. 

We have recovered lost & stolen devices this way.

When we get an alert, we go to the site with our campus police to handle the situation. In some cases, the user found the device and failed to update the police report.

 

Trigger type: Connected Clients

MAC Addresses: [mac address goes here]

Folder: Top

Group: All Groups

Alert Notifications Notes: [have report, ticket & user information]

Additional Notification Options: Email

 

 

 

Bruce Osborne - Wireless Engineer
ACCP
Frequent Contributor I
Posts: 247
Registered: ‎09-14-2011
Re: Stolen Devices - Alert when seen again?
[ Edited ]

Interesting stuff!!

 

So I set up a trigger like this:


bosborne@liberty.edu wrote:

Trigger type: Connected Clients

MAC Addresses: [mac address goes here]

Folder: Top

Group: All Groups

Alert Notifications Notes: [have report, ticket & user information]

Additional Notification Options: Email

 

 

 


Now I am testing it with my iPad yet I cannot get it to work. Are there some other details that I am missing?

 

***EDIT*** I mistyped the MAC, my bad, it works so please ignore my poor typing skills and carry on. Nothing to see here. These are not the droids you are looking for...

 

Scott McNeil - IT Specialist, Global Process Automation
Network+ | CWNA | CWTS | ACSP | ACMP | ACMA | BREC
Occasional Contributor II
Posts: 16
Registered: ‎01-02-2013
Re: Stolen Devices - Alert when seen again?

Thanks all.  I got it working now.  Pretty simple.

Search Airheads
Showing results for 
Search instead for 
Did you mean: