Manualshelf

Users Guide

ManualsBrandsDell ManualsAccess PlatformsW-Series Controller AOS
491492493494495496497498499500
Table Of Contents
Optimizing Classification Behavior
Starting with ArubaOS 6.4.4, APs can be configured to periodically send WMS a list of monitored devices that
are still unclassified. Once the WMS receives this list, a classification message is sent from the WMS to the AP, to
classify each unclassified device.
In the WebUI
1. Navigate to the Configuration > Advanced Services > All Profiles>IDS >IDSGeneral >Advanced
page.
2. Configure the parameters, as described in the following table. Then click Apply.
Parameter Description
Unclassified APUpdate Enables or disables classification updates for monitored APs. If
this option is enabled, it helps decrease the delay in the speed
at which the devices are classified.
Default: Disabled
Unclassified Device Update Interval The time interval for the AP to send the WMS a list of
unclassified APs and clients. The minimum interval is 30
seconds.
Default: 60 seconds
Unclassified STAUpdate Enables or disables classification updates for monitored clients.
If this option is enabled, it helps decrease the delay in the speed
at which the devices are classified.
Default: Disabled
Table 109: IDSGeneral Profile Parameters
In the CLI
Use the following command to configure IDSGeneral Profile parameters using the CLI.
ids general-profile <profile-name>
unclass-ap-update
unclass-device-update-interval
unclass-sta-update
Managing List of Valid Exempt Clients
Starting with ArubaOS 6.4.4, the administrator can configure clients to be exempted from valid station
protection and valid station misassociation detection by adding the mac-address of those devices to the valid-
exempt-list.
Once a client MAC address is added to the valid-exempt list:
l If the client exists in the WMS, the classification is set to valid.
l If the client does not exist in the WMS, a client entry is created and then the classification is set to valid.
l After the classification is done, APs that are seeing the client are notified that the client is added to the valid-
exempt list.
A maximum of 200 MAC addresses can be added to a valid-exempt list and this list is not retained after the controller
reboots or a process is restarted.
Dell Networking W-Series ArubaOS 6.5.x | User Guide Wireless Intrusion Prevention | 499