Access point radios can function as a sensor and upload information to a dedicated AirDefense server (external to the controller). Unique AirDefense server configurations can be used by RF Domains to ensure a WIPS server configuration is available to support the unique data protection needs of individual RF Domains. The access point works in conjunction with a dedicated AirDefense server forms a Wireless Intrusion Protection System (WIPS).
WIPS protects the controller managed network, wireless clients and access point radio traffic from attacks and unauthorized access. WIPS provides tools for standards compliance and around-the-clock wireless network security in a distributed environment. WIPS allows administrators to identify and accurately locate attacks, rogue devices and network vulnerabilities in real time and permits both a wired and wireless lockdown of wireless device connections upon acknowledgment of a threat.
WIPS is not supported on a WLAN basis, rather sensor functionality is supported on the access point radio(s) available to each controller managed WLAN. When an access point radio is functioning as a WIPS sensor, it is able to scan in sensor mode across all legal channels within the 2.4 and 5.0 GHz bands. Sensor support requires a AirDefense WIPS Server on the network. Sensor functionality is not provided by the access point alone. The access point works in conjunction with a dedicated WIPS server.
sensor-server <1-3> ip <IP/HOSTNAME> {port [443|<1-65535>]}
sensor-server <1-3> ip <IP/HOSTNAME> {port [443|<1-65535>]}
Sensor-server <1-3> | Configures the AirDefense sensor server parameters
|
ip <IP/HOSTNAME> | Configures the (non DNS) IPv4 address of the
sensor server
|
port [443|<1-65535>] | Optional. Configures the sensor server port. The
options are:
|
nx9500-6C8809(config-rf-domain-default)#sensor-server 2 ip 172.16.10.3 port 443
nx9500-6C8809(config-rf-domain-default)#show context rf-domain default contact Bob+14082778691 country-code us sensor-server 2 ip 172.16.10.3 override-smartrf channel-list 2.4GHz 1,2,3 override-wlan test vlan-pool 2 limit 20 layout area Ecospace floor Floor1 map-location www.firstfloor.com units meters nx9500-6C8809(config-rf-domain-default)#
sensor-server | Disables the AirDefense sensor server parameters |