Dell PowerConnect W-Airwave Configuration Manual page 106

Table 36 Aruba Configuration > Profiles > IDS > Unauthorized Devices Profile Settings (Continued)
Field
Suspected Rogue
Containment
Confidence Level
(50-100)
Protect Valid
Stations
Detect Bad WEP
Detect
Misconfigured AP
Protect
Misconfigured AP
Protect SSID
Privacy
Require WPA
Valid 802.11g
Channel for Policy
Enforcement
Valid 802.11a
Channel for Policy
Enforcement
Valid MAC OUIs
Valid and Protected
SSIDs
Protect 802.11n High
Throughput Devices
Protect 40MHz
802.11n High
Throughput Devices
Detect Active 802.11
Greenfield Mode
3. Click
Unauthorized Devices
106 | Aruba Configuration Reference
Default
60
No
No
No
No
No
No
No
N/A
N/A
N/A
N/A
No
No
Yes
Add Save
or . The added or edited
page.
Description
Set the confidence level. When an AP is classified as a suspected rogue
AP, it is assigned a 50% confidence level. If multiple APs trigger the same
events that classify the AP as a suspected rogue, the confidence level
increases by 5% up to 95%.
In combination with suspected rogue containment, this option configures
the threshold by which containment should occur. Suspected rogue
containment occurs only when the configured confidence level is met.
Use this setting to disallow valid stations from connecting to a non-valid
AP.
Enable or disable detection of WEP initialization vectors that are known to
be weak. A primary means of cracking WEP keys is to capture 802.11
frames over an extended period of time and searching for such weak
implementations that are still used by many legacy devices.
Enable or disable detection of misconfigured APs. An AP is classified as
misconfigured if it does not meet any of the following configurable
parameters:
Valid channels
Encryption type
Short preamble
List of valid AP MAC OUIs
Valid SSID list
Enable or disable protection of misconfigured APs.
Enable or disable use of SSID by only valid APs.
Enable or disable encryption as valid AP configuration.
Enable or disable "misconfigured" flagging of any valid AP that is not using
WPA encryption.
Enter the list of valid 802.11g channels that third-party APs are allowed to
use.
Enter the list of valid 802.11a channels that third-party APs are allowed to
use.
Enter the list of MAC OUIs of wired devices in the network, typically
gateways or servers.
Enter the list of valid and protected SSIDs.
Enable or disable protection of high-throughput 802.11n devices not
operating in 40 MHz mode.
Enable or disable protection of high-throughput (802.11n) devices
operating in 40 MHz mode.
Enable or disable detection of high-throughput devices advertising
greenfield preamble capability.
Unauthorized Devices
AirWave Wireless Management Suite | Configuration Guide
Profiles > IDS >
profile appears on the