Wireless Access

Reply
Frequent Contributor I
Posts: 79
Registered: ‎05-15-2012

Send Alert When a Rogue AP is Connected to the LAN

I'd like to get an alert when a Rogue AP is classified as "Detected Wirelessly and on LAN". I thought about creating a trigger for it, but it isn't obvious to me how to configure it for this. How would you do this?

Thanks,
Robert

 

Frequent Contributor I
Posts: 64
Registered: ‎02-28-2012

Re: Send Alert When a Rogue AP is Connected to the LAN

You might check the "Setting Triggers for IDS Events" on Airwave User Guide ( its in page 211 on Airwave 7.5 UG).

 

Goodluck!

Frequent Contributor I
Posts: 79
Registered: ‎05-15-2012

Re: Send Alert When a Rogue AP is Connected to the LAN

Thanks. I'd looked over that. The rules under RAPIDS all have a threat level of 5. I bumped the rule for Rogues on the LAN to threat level 6 and made a trigger based off the threat level. I'll see how that works.

Frequent Contributor I
Posts: 79
Registered: ‎05-15-2012

Re: Send Alert When a Rogue AP is Connected to the LAN

It looks like another option would be to create a report that runs regularly with the option "New Rogue Devices: Devices Discovered on the LAN Only" reported. I'll try that too.

 

Robert

 

New Contributor
Posts: 1
Registered: ‎01-14-2013

Send Alert When a Rogue AP is Connected to the LAN

I know that you can setup an email alert...I am seeking to be able to generate/send via syslog or SNMP Trap.  Any information would be appreciated.

Guru Elite
Posts: 20,811
Registered: ‎03-29-2007

The controller will do that by default (send SNMP traps a...


hartwell.watkins wrote:

I know that you can setup an email alert...I am seeking to be able to generate/send via syslog or SNMP Trap.  Any information would be appreciated.


The controller will do that by default (send SNMP traps and syslog).  In Airwave you can also forward to an NMS in a trigger.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: