Wireless Access

last person joined: an hour ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Preventing Rogue AP in cooperate network

This thread has been viewed 3 times

  • 1.  Preventing Rogue AP in cooperate network

    Posted Aug 12, 2015 06:26 AM

    Hi there,

     

    What are the available methods to prevent rogue AP in a cooperate enviroment ? Would deauth be the only method ? I understand that i would have to convert one of my AP to air monitor mode in order to achieve this. Is this true ?

     

    Cheers



  • 2.  RE: Preventing Rogue AP in cooperate network
    Best Answer

    EMPLOYEE
    Posted Aug 12, 2015 06:34 AM

    Please read the chapter on Wireless Intrusion Protection Here:  http://www.arubanetworks.com/techdocs/ArubaOS_64x_WebHelp/Web_Help_Index.htm#ArubaFrameStyles/New_WIP/New_WIP.htm%3FTocPath%3DWireless%2520Intrusion%2520Detection%7C_____0

     

    With the base license, rogue access points can be contained with Deauths.  You do not need to have dedicated air monitors to attempt to stop rogue access points, but it is much more effective with dedicated air monitors.

     

     With the RF Protect license, rogue access points  can be contained with Tarpit shielding, which is more effective than deauths and requires less airtime.   http://www.arubanetworks.com/techdocs/ArubaOS_64x_WebHelp/Web_Help_Index.htm#ArubaFrameStyles/New_WIP/Tarpit_Shielding.htm%3FTocPath%3DWireless%2520Intrusion%2520Detection%7C_____11

     

    You have to be careful, because in some regulatory domains, wireless containment is illegal under some circumstances and you should consult legal counsel before turning containment on.  Please read here:  http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/The-FCC-has-clarified-their-stance-on-wireless-containment-but/m-p/226286/highlight/true#M46120