Configuring The Access Point For Monitor Mode - Allen-Bradley Stratix 5100 User Manual

Configuring WDS, Fast Secure Roaming, Radio Management, and Wireless Intrusion Detection Services

Configuring the Access Point for Monitor Mode

When an access point is configured as a scanner it can also capture frames in
monitor mode. In monitor mode, the access point captures 802.11 frames and
forwards them to the WIDS engine on your network. The access point adds a 28-
byte capture header to every 802.11 frame that it forwards, and the WIDS engine
on your network uses the header information for analysis. The access point uses
UDP packets to forward captured frames. Multiple captured frames can be
combined into one UDP packet to conserve network bandwidth.
In scanner mode, the access point scans all channels for radio activity. However,
in monitor mode, the access point monitors only the channel that is configured.
If your access point contains two radios, both radios must be configured for
TIP
scanner mode before you can configure monitor mode on the interfaces.
Beginning in privileged EXEC mode, follow these steps to configure the access
point to capture and forward 802.11 frames:
1. Enter global configuration mode.
configure terminal
2. Enter interface configuration mode for the radio interface.
• The 2.4 GHz radio and the 2.4 GHz 802.11n radio is 0.
• The 5 GHz radio and the 5 GHz 802.11n radio is 1.
interface dot11radio {0 | 1}
3. Configure the radio for monitor mode. Enter the IP address and the UDP
port on the WIDS engine on your network.
(Optional) Configure a maximum length in bytes for each forwarded
frame. The access point truncates frames longer than this value. The
default length is 128 bytes.
monitor frames endpoint ip address IP-address port
UDP-port
[truncate truncation-length]
4. Return to privileged EXEC mode.
end
Rockwell Automation Publication 1783-UM006A-EN-P - May 2014
Chapter 13
403