Rogue Containment Options - Dell PowerConnect W-Airwave User Manual

Rogue Containment Options

Using RAPIDS, AMP can shield rogue devices from associating to Cisco WLC controllers (versions 4.2.114 and
later), and Dell PowerConnect W-Series controllers. AMP will alert you to the appearance of the rogue device
and identify any mismatch between controller configuration and the desired configuration.
NOTE: WMS Offload is not required to manage containment in AMP.
Table 95
Table 95 RAPIDS > Setup > Containment Options Fields and Default Values
Field
Manage rogue AP
Containment
Manage rogue AP
containment in monitor-only
mode
Maximum number of APs to
contain a rogue
1. Navigate to the RAPIDS > Setup page.
2. From the Containment Options section, select Yes in the Manage rogue AP containment field. Once this is
done, the Contained Rogue classification will appear as an option in the classification drop down menu as
shown in
Additionally, once this option been enabled, the option to manage contained APs in Monitor-Only mode
becomes available. Containment in Monitor-Only mode means configuration changes will still be pushed to
the controller, even though it is in monitor-only mode.
Figure 117 RAPIDS > Classification Rule Menu with Containment
From the APs/Devices > Rogues Contained page, you can see the containment status information, as shown in
Figure 118.
NOTE: The Rogue Containment device tab is only present for devices that support containment.
Dell PowerConnect W-AirWave | User Guide
shows the Containment Options section of the RAPIDS > Setup page.
Default
Yes
No
3
Figure 117.
Description
Rogue APs on Cisco WLC and Dell PowerConnect W controllers as defined by
the Rules engine will be classified as a Contained Rogue. AMP pushes the
containment status of a rogue device to the controller and the controller takes
the appropriate action. For the rogue device to be contained, you may need to
configure containment on the controller.
If disabled, AMP will display the desired containment settings but will not push
them to devices. This may result in mismatches in device classifications. This
can be useful for administrators that want to see what RAPIDS would push to the
controller without making any changes to their network.
If enabled, AMP will push the desired containment settings to the controllers in
Monitor-Only mode, as well as the devices in Managed mode.
Sets the maximum number of APs that will contain a rogue on Cisco WLC
controllers.
Using RAPIDS and Rogue Classification | 167