Technical data

Modifying Detection and Mitigation CLI Settings
© 2012 Meru Networks, Inc. Rogue AP Detection and Mitigation 195
Changing the Number of Mitigating APs with the CLI
By default, three mitigating APs are selected by the controller to perform scanning
and mitigation. This number can be set to a high of 20 APs or down to 1 AP, depending
on the needs of your network, although we do not recommend assigning a high
number of APs for mitigation because they can interfere with each other while miti-
gating the rogue. To change the number of mitigating APs to 5:
controller(config)# rogue-ap assigned-aps 5
Changing the Scanning and Mitigation Settings with the CLI
When rogue AP scanning is enabled, for any given period, the AP spends part of the
time scanning channels, and part of the time performing normal AP WLAN operations
on the home channel. This cycle of scan/operate repeats so quickly that both tasks
are performed without noticeable network operation degradation.
If scanning is enabled, the rogue-ap operational-time command sets the number of
milliseconds that are spent in operational time, performing normal wireless services,
on the home channel. This command is related to the rogue-ap scanning-time
command. The channels that are scanned are determined by the rogue-ap scanning
channels command. The complete set of default channels are
1,2,3,4,5,6,7,8,9,10,11,36,40,44,48,52,56,60,64,149,153,157,161,165.
The following command changes the operational time from the default 400 to 2500
milliseconds:
controller(config)# rogue-ap operational-time 2500
The following command changes the scanning time from the default 100 to 200 milli-
seconds:
controller(config)# rogue-ap scanning-time 200
The following command sets the scanning channels to 1, 6, 11, 36, 44, 52, 60:
controller(config)# rogue-ap scanning-channels 1,6,11,36,44,52,60
controller(config)# exit
To verify the changes, use the show rogue-ap globals command:
controller# show rogue-ap globals
Global Settings
Detection : on
Mitigation : selected
Rogue AP Aging (seconds) : 60
Number of Candidate APs : 5
Number of Mitigating APs : 5
Scanning time in ms : 200
Operational time in ms : 2500
Max mitigation frames sent per channel : 10
Scanning Channels : 1,6,11,36,44,52,60
RSSI Threshold for Mitigation : -100