Specifications

Introduction
Altitude 3500 Series Access Point Product Reference Guide
14
● WIPS Support on page 14
● Trusted Host Management on page 15
● Apache Certificate Management on page 15
● Adaptive AP on page 15
● Rogue AP Detection Enhancement on page 16
● RADIUS Time-Based Authentication on page 16
● QBSS Support on page 16
● LLDP Support on page 16
IP Filtering
IP filtering determines which IP packets are processed normally and which are discarded. If discarded,
the packet is deleted and completely ignored (as if never received). Optionally apply different criteria to
better refine which packets to filter.
IP filtering supports the creation of up to 18 filter rules enforced at layer 3. Once defined (using the
access point’s SNMP or CLI), filtering rules can be enforced on the access point’s LAN1, LAN2 and
WLAN interfaces. An additional default action is also available denying traffic when the filter rules fail.
Lastly, imported and exported configurations retain their defined IP filtering configurations.
For information on configuring the access point’s IP filtering functionality, see “Configuring IP
Filtering” on page 166.
Auto Channel Select (ACS) Smart Scan
The access point supports a new Auto Channel Select (ACS) feature allowing users to specify an
exception list for channel usage. When channel exceptions are defined, the access point skips the
channels specified in the list. When the smart scan feature is enabled (it’s disabled by default), up to 3
separate channels can be excluded. The exception list is configurable using the access point’s CLI, GUI
and SNMP interfaces. Imported and exported configurations retain their defined exception list
configurations.
For additional information on defining a channel exception list, see “Configuring the 802.11a or
802.11b/g Radio” on page 154.
WIPS Support
An access point radio can function as a Wireless Intrusion Protection System (WIPS) sensor and upload
sensor mode operation information to a dedicated WIPS server. Either one or both of the
access point radios can be configured as WIPS supported radio. WIPS is not supported on a WLAN
basis, rather WIPS is supported on the access point radio(s) available to each WLAN.
WIPS protects your wireless network, mobile devices and traffic from attacks and unauthorized access.
WIPS provides tools for standards compliance and around-the-clock 802.11a/b/g wireless network
security in a distributed environment. WIPS allows administrators to identify and accurately locate
attacks, rogue devices and network vulnerabilities in real time and permits both a wired and wireless
lockdown of wireless device connections upon acknowledgement of a threat.