07-26-2012 06:26 PM
Is it possible to configure our Aruba Controller to automatically disabled all unauthorized APs and routers plug into our network? If yes, any tutorial or guide to enable this?
- Are the above displayed active interfering APs all inside our network? Will it include wireless APs outside of our network too?
- What should be the recommended action we should do to reduce this interfering issue? I would like to know what does these options actually do, their differences example.
- Set as interfering
- Set as Rogue
- Set as Suspected Rogue
07-27-2012 05:38 AM
Yes you can configure the controllers to actively disable rogue AP's though I prefer to be alerted about it and then decide if I want to do anything to the rogue AP. If setup properly you could send a deauth/auth flood to the rogue AP as well an ARP attack on the wired side.
Interferring are AP's that are not configured on your controller, but your AP's see them in the wireless spectrum but doesn't see them on the wired network. Suspected Rogue may be plugged into the network and are worth investigating. Rogue are plugged into your wired network and also providing wireless access. They should deifnately be looked into.
Assuming you have the WIPS licenses installed, you can use the wip wizard to configure what attacks to look for and how to deal with them.
Reference the Wireless Intrusion Detection section of the User Guide for detailed instructions and lots of good content on this.
07-30-2012 09:48 PM
I usually recommend to manually go through the list (e.g. rainy day work...) and classify the networks that you clearly know are not in your building.
If you have Airwave in your installation you can write some post-processing rules that will do a good job of streamlining some of this process.
The goal being to get an accurate classification of the neighbours etc. such that one morning when 'something is different' you can tell/see/alert right away without all the noise/ambient networks potentially hiding the new device just freshly added and open-for-business.
01-14-2013 06:11 PM - edited 01-14-2013 06:16 PM
Does anyone have any diagram like cisco product about wireless controller?
credit the diagram from; http://cisconetworkingcenter.blogspot.com/2012/04/
07-07-2015 08:25 PM
I have an access point that is being classified as Rogue by Airwave. This AP is for testing and I want Airwave to stop classifying this AP as rogue. I tried to change it to neighbor but I still get alerts, Is there any other way to stop Airwave classifying this AP as rogue.