Wireless Access

hello 

we have ssid = ssid 1,2,3,4

we want allow ssid = ssid 1,2,3 

we want block ssid = ssid 4

so i configured IDS General profile and IDS Unauthorized Device profile .

i insert ssid 1,2,3 in Valid and Protected SSIDs before running wips ap 

i checked my device. but all wifi bloked.

i dont understand this situation.

anyone help me please...IDS General ProfileIDS Unauthorized Device 1IDS Unauthorized Device 2IDS Unauthorized Device 3

Uncheck  "Protect Misconfigured APs"

What kinds of clients are you trying to block from those SSIDs?

thanks for Reply

I want all client block ( Laptop , mobile ,wireless etc...) to connect trying ssid 4

and i test Uncheck  "Protect Misconfigured APs"

but i blocked all ssid .....  

what can i do ?

Do you want to turn off SSID 4, then?

i want to turn off ssid 1 

permit  list - ssid 1, ssid 2 , ssid 3

block list - ssid 4

becouse There is another office ssid near our office.

so i want block my test ssid and unblock another office ssid

I FIND IT !! 

I configed default profile and checked " Protect SSID" and "Detect valid SSID Misuse" . 

last , add ssid4 ( i wanted block ssid ) in Valid and Protected SSIDs.

so i try connecting ssid4  , I CAN'T connect ssid4 and I Can connect ssid1,2,3 

thank you for reply my post~!  

Hi,

I encountered the same problem, I need to block ssid which is not mine

SSID 4 was from your controller or from next office controller ?

Regards

Rafi

Hi 

SSID 4 is from my controller

It is test Lab ssid

anyway

If you want block another ssid ,Enter the SSID you want to block into the Valid and Protected SSID

Or 

Dashboard > Security >Click on the SSID to block > Reclassify > Rogue> Reclassify button 

in my case , I applied second way in my site 

Please refer to the capture below.
I hope it helps.

Hi,

Thank you for your replay,

please let see if i undestood you corectly,

If i want to block SSID (whice is not from my controller) like private router or private hotspot and the aruba controller classifiy him as suspect ruge i need to write SSID name in "Valid and Protected SSID"  ?

Because the "Valid" i thought that the meaninig is oppiste.

About second option by default Aruba   dont block rogue AP, how can change this ? do you have any procedure ? (if you have step by step it will be fabulous)

Is it posibale to block AP according to his mac address ?

I read the IPS manual but unfotunately i didnt understand how ?

Basically i cant do it  because i have  another wifi vendor in my campus, and since Aruba see  him wird and wifi he classify him as ruge.

As you know, 

If i want to block SSID (whice is not from my controller) like private router or private hotspot and the aruba controller classifiy him as suspect ruge i need to write SSID name in "Valid and Protected SSID"  ?

 -> "Valid and Protected  SSID" is IDS Unauthorized Device >Adbanced's option. 

Because the "Valid" i thought that the meaninig is oppiste.

 -> I think so too

About second option by default Aruba   dont block rogue AP, how can change this ? do you have any procedure ? (if you have step by step it will be fabulous)

 ->I hope the screenshot below helps.

Is it posibale to block AP according to his mac address ?

-> I dont know ...sorry..

< my config screenshot > 

If you click finish button at first , sometimes never ending finish loading 

but check the All profile > IDS 

It is already configured. 

I think it is bug .

you finish wizard , you need move to Dashboard > Security page

and Reclassify Interfering AP

Dashboard > Security >Interfering AP> Click on the SSID to permit> Reclassify > Authorized> Reclassify button 

Hi,

Thank you very much,

Sorry for the delay i was OOO for a few days,

So to block SSID i need to write SSID name here ->  -> "Valid and Protected  SSID" is IDS Unauthorized Device >Adbanced's option.

Am i right ?

I couldnt find "Adbanced's"  option my version is 6.5.3.3

Please see attached screenshot

Regards

hello~

You found it exactly.

but If you can't find it, check your wips license .

I heard that the menu is not visible without a license.

Hi,

Ok, i will try this, i have a few SSID which is not mine (not from my controller)

much obliged

Regtards

Rafi