Wired Network Monitoring is used to monitor the wired network devices in your Extreme AirDefense monitored system. Use this screen to generate generate alarms for your wired network by selecting any of the following conditions:
New device detected on the wired network - This option is enabled by default. When selected, an alarm is generated when a new device is detected on the wired side of your Extreme AirDefense managed network.
Using the Known Vendors button, you can select the wired equipment vendors of devices that are commonly used in your network. When a device of a vendor found in the list is added to the wired network, the system will generate an alarm of lower severity than that is normally generated.
Sanctioned wired device detected at different location in tree hierarchy than when originally discovered - Select this option to generate an alarm when a device has moved to a different location in your Extreme AirDefense tree hierarchy from where it was originally discovered when it was first added to the system.
Sanction device no longer observed. - Select this option to generate an alarm when a sanctioned device is not observed in your wired network. You must specify a minimum time for the device to have not been seen on your network for this alarm to be generated. Use the Minimum not seen time control and its associated spinner control to set the time duration.
To detect new devices on your network, existing devices must be classified as sanctioned. Use the Mass Wired Network Device Classification button to open a dialog where you can sanction all or a selection of devices at one time. It is recommended that this process should be done when you initially configure policies or after major network changes.
It is recommended to enable Wired Network Monitoring at the appliance level by selecting the Enable Configurations switch. When you do, all the other network levels are also monitored.
If you need to monitor a specific level in your Extreme AirDefense hierarchy,
navigate to the level in the Structure & Tags
pane and select it. Use the control's Override option to
monitor this level and all the levels below it. Customize the monitoring options to
meet your requirements.
For more information on overriding, see the section Overriding Configuration Settings in this document.
Use the Set Network PCI Scope button to add VLANs to be monitored for PCI compliance. When this button is selected, the Network PCI Scope screen displays.
The Enable Configuration switch is only available at the top most node of the Structure & Tags pane. Configurations can only be applied when this switch is set to ON. The top most node is always named ADSP and you must use this switch to apply the selected configuration through out the Extreme AirDefense system.
By default, any level in the Structure & Tags pane always inherits configuration from the level above it unless explicitly overridden.
Since Extreme AirDefense manages its devices using a hierarchy that is configured using the Structure & Tags pane, all the nodes under the top ADSP node inherit the configurations set at that node. However, you can override the inherited configuration at any level in the hierarchy.
To override the inherited settings, in the Structure & Tags
pane, select the node where you want to override the inherited configuration. Then
from the control, select the Override option. Note
that the Inherited from
: control always displays the name of the level from which the
configuration settings are inherited from. Use this information to orient your self
on how the configurations are inherited.
Change the configuration for the selected level as required and then use the APPLY button to implement the modified configuration settings. These settings will now be inherited by all levels below the selected level unless a sub-level has been explicitly overridden.