Cisco Cisco 5520 Wireless Controller Guía De Diseño
1-50
Book Title
OL-xxxxx-xx
Chapter 1 Cisco Adaptive wIPS Management Deployment Guide, Release 8.0
WIPS monitoring on 2800, 3800 and 1560 AP
Note
The WSM module will use a L-WIPS-MM license.
WIPS monitoring on 2800, 3800 and 1560 AP
Flexible Radio Assignment, allows for either manual configuration or for the APs to intelligently
determine the operating role of the integrated radios based on the available RF environment. The AP can
operate in Wireless Security Monitoring and 5 GHz role, where one radio serves 5 GHz clients, while
the other radio scans both 2.4 GHz and 5 GHz for wIPS attackers, CleanAir interferers, and rogue
devices.
determine the operating role of the integrated radios based on the available RF environment. The AP can
operate in Wireless Security Monitoring and 5 GHz role, where one radio serves 5 GHz clients, while
the other radio scans both 2.4 GHz and 5 GHz for wIPS attackers, CleanAir interferers, and rogue
devices.
When a radio is on its serving channel it is considered “on-channel”, when the radio is scanning other
channels, it is considered “off-channel”. There are three deployment scenarios in which an AP can be
configured for WIPS scanning.
channels, it is considered “off-channel”. There are three deployment scenarios in which an AP can be
configured for WIPS scanning.
•
ELM global mode with FRA radio in client serving offering best effort off channel support.
Local Mode with wIPS provides wIPS detection “on-channel”, which means attackers will be
detected on the channel that is serving clients. For all other channels, ELM provides best effort wIPS
detection. This means that every frame the radio would go “off-channel” for a short period of time.
While “off-channel”, if an attack occurs while that channel is scanned, the attack will be detected.
FRA radio in ELM client serving mode is still capable of serving clients.
detected on the channel that is serving clients. For all other channels, ELM provides best effort wIPS
detection. This means that every frame the radio would go “off-channel” for a short period of time.
While “off-channel”, if an attack occurs while that channel is scanned, the attack will be detected.
FRA radio in ELM client serving mode is still capable of serving clients.
L-WIPS-ELM-100AP
License for 100 access
points in local mode
with wIPS
points in local mode
with wIPS
L-WIPS-ELM-1000AP
License for 1000 access
points in local mode
with wIPS
points in local mode
with wIPS
Table 1-1
Cisco Adaptive wIPS Software Licenses
License SKUs
Description