Extreme Networks Summit WM Series Guía de usuario Pagina 126

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 228
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 125
Summit Spy: detecting rogue access points
Summit WM-Series WLAN Switch and Altitude Access Point Software Version 1.0 User Guide
126
Active: the Altitude AP sends out ProbeRequests and waits for ProbeResponse messages from
any access points.
Passive: the Altitude AP listens for 802.11 beacons
7 In the Channel Dwell Time field, key in the time in milliseconds that the scanner waits for a
response (either for 802.11 beacons in passive scanning, or ProbeResponse in active scanning).
8 In the Scan Time Interval field, key in the time in minutes {1 to 120}, to define the frequency at
which a Altitude AP within the Scan Group will initiate a scan of the RF space.
9 To start a scan, using the periodic scanning parameters defined above, click on the Start Scan button
10 To initiate an immediate scan that will run once, click on the Run Now button.
A scan will not run on an inactive AP, even though it appears as part of the Scan Group. It it become
active, it will be sent a scan request during the next periodic scan.
11 To stop the scan, click on the Stop Scan button.
NOTE
You must stop the scan before modifying any parameters of the Scan Group, or before adding or removing a
Altitude AP from a Scan Group.
12 The Scan Activity field displays the current state of the scan engine.
13 To view a popup report showing the timeline of scan activity and results, click on the Show Details
button.
The Analysis Engine
The Analysis Engine relies on a database of known devices on the Summit WM-Series Switch Software
system as follows:
Altitude APs registered with any Summit WM-Series Switch that has its RF Data Collector enabled
and has been associated with the Analysis Engine on this Summit WM-Series Switch.
Third-Party Access Points that have been defined and assigned to a WM-AD (as described earlier in
this Guide).
Friendly APs, a list created in the Summit Spy user interface as potential rogue access points are
designated by the administrator as “Friendly”.
Wireless devices registered with any Summit WM-Series Switch that has its RF Data Collector
enabled and has been associated with the Analysis Engine on this Summit WM-Series Switch.
The Analysis Engine compares the data from the RF Data Collector with the above database of known
devices.
The Analysis Engine looks for access points with seven conditions:
unknown MAC address and unknown SSID (critical alarm)
unknown MAC, with a valid SSID - a known SSID is being broadcast by the unknown access point
(critical alarm)
known MAC, with an unknown SSID - a rogue may be spoofing a MAC address (critical alarm)
inactive Altitude AP with valid SSID (critical alarm)
inactive Altitude AP with unknown SSID (critical alarm)
Vista de pagina 125
1 2 ... 121 122 123 124 125 126 127 128 129 130 131 ... 227 228

Comentarios a estos manuales

Sin comentarios