Brocade Mobility 5181 Access Point Product Reference Guide (Supporting software release 4.4.0.0) - Manual (Page 177)

Brocade Mobility 5181 Access Point Product Reference Guide 163
53-1002516-01
Configuring rogue AP detection
6
CAUTION
sing an antenna other than the Dual-Band Antenna (Part No. ML-2452-APA2-01) could render the
Mobility 5181 Access Point’s Rogue AP Detector Mode feature inoperable. Contact your Brocade
sales associate for specific information.
To configure Rogue AP detection for the Mobility 5181 Access Point:
1. Select Network Configuration -> Wireless -> Rogue AP Detection from the Mobility 5181 Access
Point menu tree.
2. Configure the Detection Method field to set the detection method (Client or Mobility 5181
Access Point) and define the 802.11a or 802.11b/g radio to conduct the rogue AP search.
3. Use the Allowed AP List field to restrict Brocade AP’s from Rogue AP detection and create a list
of device MAC addresses and ESSID’s approved for interoperability with the Mobility 5181
Access Point.
RF Scan by Client Select the RF Scan by Client checkbox to enable Clients to scan for
potential rogue APs within the network. Define an interval in the
Scan Interval field for associated Clients to beacon in an attempt
to locate a rogue AP. Set the interval to a value sooner than the
default if a large volume of device network traffic is anticipated
within the coverage area of the target Mobility 5181 Access Point.
The Scan Interval field is not available unless the RF Scan by
Client checkbox is selected. Brocade clients must be associated
and have rogue AP detection enabled.
RF On-Channel Detection Select the RF On-Channel Detection checkbox to enable the
access point to detect rogue APs on its current (legal) channel
setting.
RF Scan by Detector Radio If the access point is a dual-radio model, select the RF Scan by
Detector Radio checkbox to enable the selected 11a or 11b/g
radio to scan for rogue APs. For example, if 11b/g is selected, the
existing 11a radio would act as the “detector radio,” scanning on
all 11b/g channels while the existing 11b/g radio continues to
service Clients. The assumption is, when planning to do an all
channel scan on one band, the Clients would also be on that band.
The radio on the other band is used as the “detector radio.”
RF A/BG Scan Select this checkbox to scan for rouges over all channels on both
of the access point’s 11a and 11bg radio bands. The switching of
radio bands is based on a timer with no user intervention required.
This option provides a good opportunity to detect rogues, as
rogues often roam from one association to a stronger one
regardless of the current operating channel.
Authorize Any AP Having
Brocade Defined MAC Address Select this checkbox to enable all access points with a Brocade
MAC address to interoperate with the Mobility 5181 Access Point
conducting a scan for rogue devices.
Add Click Add to display a single set of editable MAC address and ESS
address values.