Wireless Access

Hi,

I have Aruba620 connected with 4 AP and 1 air monitor, i need to drop the Interfering wireless network  so i reclassify them to Rogue but that not make them drop, any suggestion?

Thank you

DO you got WIP/RFP module installed ? if not - the rouge classify will not do nothing.

Hello,

Kindly find the attached all licenses that i have.

thank you

OK .. u got RFPORTECT installed.

by "drop" - what do u mean? when u mark SSID as rouge...the controller will try to DOS the wired port of this AP and will also de-auth /trapit the users that trying to connect to it - but it still be will visable and will transmit.

Are those interference APS are  IN your network or its OUT your network?

If they are IN then yes you can kill them and to fin them you can use my manual  to clasiffy rogue APS with L3 rogue detection.

http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/Tutorial-How-to-detect-Rogue-APS-with-L3-Rogue-Detection/m-p/156722

If they are OUT your network you should not drop them, i mean they are your neighbors APS and you should not do anything to their APS i mean thats not ethic :)

yes i mean by drop that "de-auth /trapit the users that trying to connect to it" but that not happened.

Do you mean your internal users trying to connect to external APS?which are not your APS?

Cheers

Carlos

Yes, correct

You need to activate this: Detect Valid Client Misassociation

Its on ap group--> ids Profile--->ids unauthorized device.

Cheers

Carlos

That client you are going to test you need that the client alrady have been associated with the your Aruba Wireless system.

The controller holds a Client table or something like that, and that way he knows which valid clients are trying to associate with a rogue ap or an ap which does not belong to your company.

Also your Ap in air monitor must be in range, and has the air monitor with the config.

Cheers

Carlos

its already activated.

You also  need to check  Protect Valid Stations

Valid client involves disconnecting that client if it is associated to a non-valid AP.

So be sure you see all your aruba APs as valid clients

Whati  told you before just detect them but does not prevent from anything, this should do what you need.

Please enable it and try

As best practice you should not use default for this config... you should create a new profile, becasue if something goes wrong you just put the default profile again.

Cheers

Carlos

Also the "Protect Valid Stations" checked but still not working.

Thanks

Well thats weird... i configured this a while ago for a client and it was working just fine....

Do you have your air monitor in range?

How is that AP classified?

What you got configured on IDS GENERAL on wireless containment??

Did you try connecting to your aruba wireless network and then after is connected to the unsafe AP?

ill try to replicate this for you his week... ill bring one of the APS to my home and put it as air monitor and test...

Also

Do you see that client when you issue the command

show wms client list | include valid

Also check that this is not happening to you

http://community.arubanetworks.com/t5/Security-WIDS-WIPS-and-Aruba-ECS/Valid-Client-Not-Using-Encryption/td-p/14890

What code do you have?

Cheers

Carlos