Installation guide

Switch Security
6-5
4. Refer to the MU Assisted Scan field to enable associated MUs to assist in the detection of access
points.
5. Click the Apply button to save the changes made.
6. Click the Revert button to cancel any changes and revert back to the last saved configuration.
7. Refer to the Allowed APs field to view the policies used for interpreting allowed access points
within the switch managed network.
8. Select an Allowed AP and click the Edit button to launch a screen used to modify the index and SSID
of the AP. For more information, see Adding or Editing an Allowed AP on page 6-6.
9. Select an Allowed AP and click the Delete button to remove the AP from list of Allowed APs.
10. Click the Add button to display a screen used to enter device information for a new AP added to the
Allowed AP list. For more information, see Adding or Editing an Allowed AP on page 6-6.
Approved AP timeout Define a value (in seconds) the switch uses to timeout (previously
approved) access points that have not communicated with the
switch. The range is from 1-65535 seconds, with a default of 300
seconds. This value is helpful for continually re-validating access
points that interoperate within the switch managed network.
Unapproved AP
timeout
Define a value (in seconds) the switch uses to remove access
points that have not communicated with the switch. The range is
from 1-65535 seconds, with a default of 300 seconds.
Enable Select the Enable checkbox to enable associated MUs to detect
potentially hostile access points (the definition of which defined by
you). Once detected, these devices can be added to a list of access
points either approved or denied from interoperating within the
switch managed network.
Refresh Time Define a value (in seconds) associated MUs use to scan for access
points within the switch managed network. The range is from
300 - 86400 seconds, with a default of 1800 seconds.
Index Displays the numerical identifier (index value) assigned to this
particular set of Allowed APs. Assign this value by clicking Add for
a new set of access point address information or click the Edit
button to revise the index. The Index can be used as reference to
group specific devices numerically to a specific range of MAC or
ESSID addresses. This user cannot modify the index from this
screen.
BSS MAC Address Displays the MAC address of the Allowed AP(s). The MAC
addresses displayed are defined by clicking the Add button and
entering a specific MAC address or by allowing all MAC addresses
to be allowed. The list of MAC addresses allowed can be modified
by highlighting an existing entry, clicking the Edit button and
revising the properties of the MAC address.
ESSID Displays the ESSIDs of the Allowed AP(s). The addresses displayed
are defined by clicking the Add button and entering a specific MAC
address or by allowing all MAC addresses to be allowed. The list
of MAC addresses allowed can be modified by highlighting an
existing entry, clicking the Edit button and revising the properties
of the MAC address.