Wireless Access

Reply
Occasional Contributor I

RFProtect and adhoc network

Hi Guys,

I try the adhoc detection and protection, but after i set the needed checkbox (AdHoc detection, AdHoc protection) my AMs dont block the adhoc connection...I have a test adhoc network (Windows XP, DHCP server on this XP, Intel Proset wifi client application which can start the adhoc network). After the needed configuration my second laptop can connect to the adhoc...

Have someone any experience with the adhoc blocking?

Thanx

Tamas
Guru Elite

Re: RFProtect and adhoc network


Hi Guys,

I try the adhoc detection and protection, but after i set the needed checkbox (AdHoc detection, AdHoc protection) my AMs dont block the adhoc connection...I have a test adhoc network (Windows XP, DHCP server on this XP, Intel Proset wifi client application which can start the adhoc network). After the needed configuration my second laptop can connect to the adhoc...

Have someone any experience with the adhoc blocking?

Thanx

Tamas




Containing Ad-Hoc networks using typical deauth method is not very effective because some client drivers ignore the deauths in ad-hoc mode and some even change channel to avoid it. You need to turn on Tarpitting to address this. Tarpitting clients requires the RFprotect license and ArubaOS 6.x and above. Please see the pic below to see where to configure this parameter



To view events, type "show log wireless 50" to see containment events.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I

I set this tarpitting all sta...

but not working, dont block the adhoc communications...

480




Containing Ad-Hoc networks using typical deauth method is not very effective because some client drivers ignore the deauths in ad-hoc mode and some even change channel to avoid it. You need to turn on Tarpitting to address this. Tarpitting clients requires the RFprotect license and ArubaOS 6.x and above. Please see the pic below to see where to configure this parameter



To view events, type "show log wireless 50" to see containment events.


Guru Elite

Re: RFProtect and adhoc network

You are editing the Probe Policy from All Profiles, so you are editing that policy from a list which could be in the wrong place. Is the AM in the AP-group with the Probe Policy? It must be for this to work. You should go to Configuration> Wireless> AP configuration. Edit the AP group that the AM is in and edit the IDS profile directly from there.


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I

IPS is active

Thanx,

I user proba-policy :) and the IPS is active, for ex. the Rogue containment working, valid client protection is working, misconfigured AP protection is working - just the ad hoc protection not working :)



Guru Elite

Re: RFProtect and adhoc network

When you type "show log wireless 50" do you see the controller doing tarpit to the Adhoc stations?


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: