Users Guide

Dell PowerConnect W-AirWave 7.5 | User Guide Using RAPIDS and Rogue Classification | 177
Filtered rogues are dropped from the system before they are processed through the rules engine. This can speed
up overall performance but will eliminate all visibility into these types of devices.
Rogue Containment Options
Using RAPIDS, AirWave can shield rogue devices from associating to Cisco WLC controllers (versions 4.2.114
and later), and PowerConnect W-Series controllers (running AOS versions 3.x and later). AirWave will alert you
to the appearance of the rogue device and identify any mismatch between controller configuration and the
desired configuration.
Table 99 shows the Containment Options section of the RAPIDS > Setup page.
1. Navigate to the RAPIDS > Setup page.
Manually Classifying Rogues
Automatically Acknowledges
them
Yes Defines whether acknowledgement happens automatically whenever a rogue
device receives a manual classification.
Table 98 RAPIDS > Setup > Filtering Options
Field Default Description
Ignore Ad-hoc rogues No Filters rogues according to ad-hoc status.
Ignore Rogues by Signal
Strength
No Filters rogues according to signal strength. Since anything below the established
threshold will be ignored and possibly dangerous, best practices is to keep this
setting disabled. Instead, incorporate signal strength into the classification rules
on the RAPIDS > Rules page.
Ignore Rogues Discovered by
Remote APs
No Filters rogues according to the remote AP that discovers them. Enabling this
option causes AirWave to drop all rogue discovery information coming from
remote APs.
Ignore IDS Events from
Remote APs
No Filters IDS Events discovered by remote APs.
Table 97 RAPIDS > Setup > Classification Options Fields (Continued)
Field Default Description
NOTE: WMS Offload is not required to manage containment in AirWave.
Table 99 RAPIDS > Setup > Containment Options Fields and Default Values
Field Default Description
Manage rogue AP
Containment
Yes Rogue APs on Cisco WLC and Dell PowerConnect W-Series controllers as
defined by the Rules engine will be classified as a Contained Rogue. AirWave
pushes the containment status of a rogue device to the controller and the
controller takes the appropriate action. For the rogue device to be contained, you
may need to configure containment on the controller.
Manage rogue AP
containment in monitor-only
mode
No If disabled, AirWave will display the desired containment settings but will not
push them to devices. This may result in mismatches in device classifications.
This can be useful for administrators that want to see what RAPIDS would push
to the controller without making any changes to their network.
If enabled, AirWave will push the desired containment settings to the controllers
in Monitor-Only mode, as well as the devices in Managed mode.
Maximum number of APs to
contain a rogue
3 Sets the maximum number of APs that will contain a rogue on Cisco WLC
controllers.