Wireless Access

Reply
Contributor I
Posts: 71
Registered: ‎12-14-2011

Configuring WIP to send SNMP traps

All, can anyone point me in the direction of finding out how to configure wip so that if a rogue AP appears on the network with the same SSID as a valid one that it send out a trap?

Guru Elite
Posts: 21,280
Registered: ‎03-29-2007

Re: Configuring WIP to send SNMP traps

You need:

 

1.  The RFProtect License

2.  Configure Detection of AP Impersonation (below)

3.  Configure a Trap Destination in Configuration> SNMP.

The trap for this is automatically sent to the Trap Destination

 

 

wip.png



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor I
Posts: 71
Registered: ‎12-14-2011

Re: Configuring WIP to send SNMP traps

Thanks I will give that a go.

Contributor I
Posts: 71
Registered: ‎12-14-2011

Re: Configuring WIP to send SNMP traps

Well as soon as i put in my trap received my mangament system became completely flooded from the wifi controller. Cant see  what the alerts are for , they look non descritpt.  How can i stop the controller from sending anythig BUT the roge ap with duplicat SSID alerts?

Contributor I
Posts: 71
Registered: ‎12-14-2011

Re: Configuring WIP to send SNMP traps

Colin,

 

 

I see that you can do the command to look at all the traps that are sent which are a lot. and then you can use:-

 (config) #snmp-server trap disable wlsxWirelessBridge
(config) #snmp-server trap disable coldStart

 

But if I only want the trap for a rogue ap with same SSID as a legitimate one sent which is this one? Also, do I have to do a disable for the hundred or so traps one by one?

 

 

Cheers!

Guru Elite
Posts: 21,280
Registered: ‎03-29-2007

Re: Configuring WIP to send SNMP traps

[ Edited ]

Attached is a list that someone on our organization put together.  Those are the raw commands to enable/disable traps.  If you search and replace enable with disable, you will disable all the traps.  Paste that in.

 

You can then enable only the traps that you want.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor I
Posts: 71
Registered: ‎12-14-2011

Re: Configuring WIP to send SNMP traps

Thanks Colin but do you know which is the right trap for the fake AP with the same SSID one?

Aruba Employee
Posts: 664
Registered: ‎04-15-2009

Re: Configuring WIP to send SNMP traps

I think the one you want is "wlsxAPImpersonation".

Contributor I
Posts: 71
Registered: ‎12-14-2011

Re: Configuring WIP to send SNMP traps

Thanks!

 

Just to clarify - doing a 'no' on all those traps will not affectig normal reporting of wip to the dashboard will it? This will only affect what is sent to a third party network?

Aruba Employee
Posts: 664
Registered: ‎04-15-2009

Re: Configuring WIP to send SNMP traps

And possibly "wlsxValidSSIDViolation"

Search Airheads
Showing results for 
Search instead for 
Did you mean: