Users Guide

Dell PowerConnect ArubaOS 5.0 | User Guide Management Access | 503
RFprotect Managed Sensors are shown in the Network > RFprotect Sensors and Controller > RFprotect
Sensors pages.
In the CLI
rf dot11a|dot11g-radio-profile <profile>
mode sensor-mode
In the outputs of the show ap database and show ap active, sensor mode is indicated with an “S” flag (for
RFprotect Sensor).
Configuring the RFprotect Server
You can configure RFprotect server to monitor rogue APs and adhoc clients.
In the WebUI
1. Navigate to the Configuration > Wireless > AP Configuration page.
2. Select either the AP Group or AP Specific tab. Click Edit for the AP group or AP name.
3. In the Profiles list, select AP, then AP system profile. The configuration setting are displayed in Profile
Details.
4. Under Profile Details:
a. In the RFprotect Server IP field, enter the IP address of the server.
b. Optionally, in the RFprotect Backup Server IP field, enter the IP address of the backup RFprotect server.
c. Click Apply.
In the CLI
ap system-profile <profile>
rfprotect-server-ip <ipaddr>
rfprotect-bkup-server <ipaddr>
Reverting Managed Sensors to APs
To revert an Dell AP acting as a Managed RFprotect Sensor back to AP or AM mode, use the CLI or WebUI to
change the operating mode of the AP in the radio profile (see “Setting RFprotect Sensor Mode in the Radio
Profile” on page 502).
Managing Certificates
The Dell controller is designed to provide secure services through the use of digital certificates. Certificates
provide security when authenticating users and computers and eliminate the need for less secure password-based
authentication.
There is a default server certificate installed in the controller to demonstrate the authentication of the controller
for captive portal and WebUI management access. However, this certificate does not guarantee security in
production networks. Dell strongly recommends that you replace the default certificate with a custom certificate
issued for your site or domain by a trusted Certificate Authority (CA). This section describes how to generate a
Certificate Signing Request (CSR) to submit to a CA and how to import the signed certificate received from the
CA into the controller.
The controller supports client authentication using digital certificates for specific user-centric network services,
such as AAA FastConnect (see Chapter 9, “802.1x Authentication”), VPN (see Chapter 15, “Virtual Private
Networks”), and WebUI and SSH management access. Each service can employ different sets of client and server
certificates.