Users Guide

203 | Using RAPIDS and Rogue Classification Dell Networking W-AirWave 8.0 | User Guide
l Use the AMP Setup > General > Performance Tuning page to define the processing priority of RAPIDS in relation
to AirWave as a whole. (See in "AMP Setup > General" on page 28.)
Defining RAPIDS Rules
The RAPIDS > Rules page is one of the core components of RAPIDS. This feature allows you to define rules by which
any detected device on the network is classified.
This section describes how to define, use, and monitor RAPIDS rules, provides examples of such rules, and demonstrates
how they are helpful.
This section contains the following topics:
l "Controller Classification with WMS Offload" on page 203
l "Device OUI Score" on page 204
l "Rogue Device Threat Level" on page 204
l "Viewing and Configuring RAPIDS Rules" on page 204
l "Recommended RAPIDS Rules " on page 207
l "Using RAPIDS Rules with Additional AirWave Functions" on page 208
Controller Classification with WMS Offload
This classification method is supported only when WMS offload is enabled on Dell Networking W-Series WLAN
switches. Controller classification of this type remains distinct from RAPIDS classification. WLAN switches feed
wireless device information to AirWave, which AirWave then processes. AirWave then pushes the WMS classification
to all of the ArubaOS controllers that are WMS-offload enabled.
WMS Offload ensures that a particular BSSID has the same classification on all of the controllers. WMS Offload removes
some load from master controllers and feeds 'connected-to-lan' information to the RAPIDS classification engine.
RAPIDS classifications and controller classifications are separate and often are not synchronized.
RAPIDS classification is not pushed to the devices.
The following table compares how default classification may differ between AirWave and Dell Networking W-Series
ArubaOS for scenarios involving WMS Offload.
AirWave ArubaOS (ARM)
Unclassified (default state) Unknown
Rogue Rogue
Suspected Neighbor Interfering
Neighbor Known Interfering
Valid Valid
Contained Rogue DOS
Table 99: Rogue Device Classification Matrix
For additional information about WMS Offload, refer to the Dell Networking W-AirWave 8.0 Best Practices Guide at
dell.com/support/manuals.