Users Guide

Table Of Contents
2. Select the client that you want to remove from the blacklist, then click Remove from Blacklist.
To remove a client from blacklisting via the command-line interface, access the CLI in enable mode and issue
the following command:
stm remove-blacklist-client <macaddr>
Working with WIP Advanced Features
Device Classification is the first step in securing the corporate environment from unauthorized wireless access.
Adequate measures that quickly shut down intrusions are critical in protecting sensitive information and
network resources. APs and stations must be accurately classified to determine whether they are valid, rogue,
or a neighboring AP. Then, an automated response can be implemented to prevent possible intrusion
attempts.
TotalWatch allows for detecting devices that are running on typical operational channels. Tarpit Shielding
provides a better way of containing devices that are deemed unauthorized. Both of these features are
discussed in the sections that follow.
l Configuring TotalWatch on page 503
l Administering TotalWatch on page 505
l Tarpit Shielding Overview on page 506
l Configuring Tarpit Shielding on page 507
Configuring TotalWatch
Dell 802.11n APs and non-11n APs in AM-mode support for TotalWatch is the ability to scan all channels of the
RF spectrum, including 2.4-and 5-GHz bands as well as the 4.9-GHz public safety band. TotalWatch also
provides 5-MHz granular channel scanning of bands for rogue devices and dynamic scanning dwell times to
focus on those channels with traffic. TotalWatch provides an advanced set of features to detect unauthorized
wireless devices and a set of customized rules are used to highlight devices that truly pose a threat to the
network.
TotalWatch is supported on APs deployed in the AM-mode only.
TotalWatch provides monitoring support for the entire WLAN spectrum. Dell APs in the AM-mode can monitor
the following frequencies:
l 2412MHz to 2472MHz in the 2.5GHz band
l 5100Mhz to 5895MHz in the 5GHz band.
Dell APs in AM-mode can scan the following additional frequencies:
l 2484 MHz and 4900Mhz to 5000MHz (J-channels)
l 5000 to 5100Mhz
If the AP is HT-capable (High Throughput), these frequencies are scanned in the 40MHz mode.
Understanding TotalWatch Channel Types and Qualifiers
Based on the regulatory characteristics, channels are categorized into the following types:
l Reg-domain Channels : A channel that belongs to the regulatory domain of the country in which the AP is
deployed. The set of channels that belong to this group is a subset of the channels in the all-reg-domain
channel group.
Dell Networking W-Series ArubaOS 6.5.x | User Guide Wireless Intrusion Prevention | 503