For new Device discovery :
Are the switches discovered with different IP or same IP? Are the switches added with switch IP to Airwave or any VLAN IP?
Airwave should not discover same device with same IP and MAC.
For WIDS:
Aruba controller will have the wired information too to state it as a Rogue. but to get wired MAC of Rogue from switch on Airwave and to do wired to wireless correlation, you need to add both controllers and switches to Airwave. When a user connects to Rogue AP, Airwave gets BSSID info and MAC tables from switch to correlate the data.
------------------------------
Gowri Sankar Amujuri
------------------------------
Original Message:
Sent: Nov 02, 2021 05:08 AM
From: Marcus Pope
Subject: Airwave detecting new devices when it shouldnt
Hi,
I have a similar requirement. We are doing a PoC for WIPS. The customer ask is as below:
1. Detect the wired MAC address & or IP address of the Rogue AP.
The controller shows the BSSID (radio mac). But we need the LAN mac so as to identify the switch port it is connected to.
Any suggestion if this is possible (with / without Airwave) and the commands / steps for that.
Thank you
------------------------------
Marcus Pope
Original Message:
Sent: Oct 26, 2021 06:20 AM
From: Alex Sharaz
Subject: Airwave detecting new devices when it shouldnt
Hi,
Small problem here
REcently upgraded an AirWave device from 8.2.8.1 -> 8.2.10.1
and since then it keeps detecting new devices and dropping them into the default Access Points folder ... except theyre not new devices theyre already known ones. There are about 110 devices that have both snmpv3 and snmpv2 credentials configured on them. The discover page has no networks or credentail defined and the communicatinos page has a default snmpv3 setting for "Aruba" devices set up.
Even if we move the discoveded devices into the correct folder they keep coming back and apearing in the Access Point folder
How can i stop this happening?
Rgds
Alex
------------------------------
Alex Sharaz
------------------------------