Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.01.03 or greater

1-39
Introduction
Radio Ports
The Wireless Edge Services xl Module collects traffic from one or more RPs.
It is this module’s role to filter this traffic, apply appropriate controls to it, and
forward it in the correct uplink VLAN in the Ethernet network.
The module also acts as the authenticator, managing responses to stations’
authentication requests and forwarding users’ credentials to a RADIUS server.
Detectors
Typically, ProCurve RPs function as masters within one or more WLANs, as
described above. However, you can also assign an RP the role of detector: such
an RP scans for other RPs (or APs) in the vicinity, instead of associating with
wireless stations.
Note More precisely, you assign an RP radio the role of detector. For example, a
dual-radio RP could use one radio to support wireless stations and one to
detect APs.
The detector is dedicated to scanning for unauthorized APs, which can
threaten the security of your network. Unauthorized APs fall into two types:
■ Those placed by unauthorized personnel without malicious intent
For example, employees might introduce APs so that they can connect to
the network more conveniently. While the employees may not mean any
harm, if these APs are not secured, those who do mean harm can exploit
the vulnerability.
■ Those placed by hackers with malicious intent
Hackers can use rogue APs to lure users into sending them their pass-
words and other sensitive information. They can also hijack your network
devices for illegal activities, opening your organization up to legal sanc-
tions.
A detector searches for these unauthorized APs:
■ It sends probes on each channel:
• used by its 802.11 mode
• allowed by the regulatory rules in its country
■ It does not respond to association requests from wireless stations.
RPs that function as masters can also scan for rogue APs. However, these RPs
simply listen for beacons from other APs on the same channel on which they
support wireless stations.