Technical data

194 Meru System Director Configuration Guide © 2012 Meru Networks, Inc.
Modifying Detection and Mitigation CLI Settings
Max mitigation frames sent per channel : 10
Scanning Channels :
1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,
56,60,64,149,153,157,161,165
RSSI Threshold for Mitigation : -100
Modify Rogue Detection and Mitigation Settings with the CLI
The default settings that are configured for the rogue AP detection and mitigation
features are adequate for most situations. However, many default settings can be
changed if your network requires lighter or heavier scanning and/or mitigation
services. The following is the list of rogue-ap commands:
controller(config)# rogue-ap ?
acl Add a new rogue AP ACL entry.
aging Sets the aging of alarms for rogue APs.
assigned-aps Number of APs assigned for mitigation.
blocked Add a new rogue AP blocked entry.
detection Turn on rogue AP detection.
min-rssi Sets RSSI Threshold for Mitigation.
mitigation Set the rogue AP mitigation parameters.
mitigation-frames Sets the maximum number of mitigation frames sent
out per channel.
operational-time Sets the APs time on the home channel during
scanning.
scanning-channels Sets the global Rogue AP scanning channels.
scanning-time Sets the APs per channel scanning time
As a general rule, unless the AP is in dedicated scanning mode, the more time that
is spent scanning and mitigating, the less time is spent by the AP in normal WLAN
operating services. Some rules determine how service is provided:
 The controller picks the APs that will scan and mitigate; those that mitigate are
dependant on their proximity to the rogue AP and the number of mitigating APs
that have been set.
 To preserve operational performance, APs will mitigate only the home channel if
they have clients that are associated.
 Settings are administered globally; there is no way to set a particular AP to
mitigate.
 Mitigation is performed only on clients associated to rogue APs; the rogue APs
themselves are not mitigated. It is the network administrator’s responsibility to
remove the rogue APs from the network.
 AP mitigation frames are prioritized below QoS frames, but above Best Effort
frames.
 To reduce network traffic, you can configure the scanning channels list that
contains only the home channels.