Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Rogue Detection on Aruba Controller

This thread has been viewed 4 times

  • 1.  Rogue Detection on Aruba Controller

    Posted Jul 28, 2016 03:07 PM

    Is there anything other involved other than just enabling it under IDS/IPS on the Aruba controller?  If just want the alerts don't want to contain so if I uncheck the contain and contain suspected I should get the alerts correct?

     

    Currently I'm trunking all the VLAN's between the WLC and Switch.  But I guess I will be setting up some as trusted and some as untrusted later on.



  • 2.  RE: Rogue Detection on Aruba Controller
    Best Answer

    EMPLOYEE
    Posted Jul 28, 2016 04:12 PM

    By default, detection is on.  Containment is NOT on by default. 

     

    Please see the chapter here:  http://www.arubanetworks.com/techdocs/ArubaOS_6.4.4.x_WebHelp/Web_Help_Index.htm#ArubaFrameStyles/New_WIP/Rogue_AP_Detection.htm?Highlight=rogue



  • 3.  RE: Rogue Detection on Aruba Controller

    Posted Jul 28, 2016 05:03 PM

    Cool thank you.  Good info, looks like advanced features require RFProtect license. 

    1- If I have two masters active/standby I'm assuming I'll just need the license on one?

    2- Can rogue alerts be configured to sent via email ?  Will HP IMC work?



  • 4.  RE: Rogue Detection on Aruba Controller

    EMPLOYEE
    Posted Jul 28, 2016 05:24 PM

    1.  You can use centralized licensing for master/backup master topology.

    2.  The controller cannot send emails for alerts.  I am not sure if IMC would be able to send emails in that context, but Airwave can send emails.