Netgear WFS709TP WFS709TP Setup Manual - Page 161

Miscon d AP Detection, Configuring Miscon d AP Protection

Page 161 highlights

WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Note: Use caution when enabling both "Mark Unknown APs as Rogue" and "Disable Users from Connecting to Rogue APs." If the system is installed in an area where APs from neighboring locations can be detected, these two options will disable all APs in the area. Misconfigured AP Detection If desired, you can specify the valid channels for an AP. This capability is primarily used when third-party APs are being used in the network, since the WFS709TP cannot configure the thirdparty APs. If a valid AP is detected as misconfigured, the system will deny access to the misconfigured AP. In cases where someone gains configuration access to a third-party AP and changes the configuration, this policy is useful in blocking access to that AP until the configuration can be fixed. Configuring Misconfigured AP Protection An AP is classified as misconfigured if it does not meet configured valid channels. To configure protection for misconfigured APs, navigate to Configuration > Advanced > RF Policies > Policies > Misconfigured AP as shown in Figure 12-4. Figure 12-4 Table 12-2 describes the fields shown in this section. Table 12-2. Valid Channel Types Field Valid Enterprise 802.11b/g Channels Valid Enterprise 802.11a Channels Description Defines the list of valid 802.11b/g channels that thirdparty APs are allowed to use. Defines the list of valid 802.11a channels that thirdparty APs are allowed to use. Configuring Wireless Intrusion Protection v1.0, June 2007 12-5

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222

WFS709TP ProSafe Smart Wireless Switch Software Administration Manual
Configuring Wireless Intrusion Protection
12-5
v1.0, June 2007
Misconfigured AP Detection
If desired, you can specify the valid channels for an AP. This capability is primarily used when
third-party APs are being used in the network, since the WFS709TP cannot configure the third-
party APs. If a valid AP is detected as misconfigured, the system will deny access to the
misconfigured AP. In cases where someone gains configuration access to a third-party AP and
changes the configuration, this policy is useful in blocking access to that AP until the
configuration can be fixed.
Configuring Misconfigured AP Protection
An AP is classified as misconfigured if it does not meet configured valid channels. To configure
protection for misconfigured APs, navigate to Configuration > Advanced > RF Policies > Policies
> Misconfigured AP as shown in
Figure 12-4
.
Table 12-2
describes the fields shown in this section.
Note:
Use caution when enabling both “Mark Unknown APs as Rogue” and “Disable
Users from Connecting to Rogue APs.” If the system is installed in an area where
APs from neighboring locations can be detected, these two options will disable all
APs in the area.
Figure 12-4
Table 12-2.
Valid Channel Types
Field
Description
Valid Enterprise 802.11b/g Channels
Defines the list of valid 802.11b/g channels that third-
party APs are allowed to use.
Valid Enterprise 802.11a Channels
Defines the list of valid 802.11a channels that third-
party APs are allowed to use.