Справочник Пользователя для NETSCOUT Systems Inc. A5020
AirMagnet Sensor Operation Modes
The Sensor has three operational modes, configuration mode, analysis mode, and active control
mode.
mode.
Configuration Mode
The Airmagnet Sensor can be configured both with a serial command line interface (CLI) and
secure HTTPS communications with a remote browser. Key parameters that need to be
configured prior to placing the sensor online include provisioning of the unit’s network
addressing, the server’s network addressing, and the secret key needed for connection to the
server and for administrator logon-override functions. Once the unit is configured it is placed on
the live network and powered up. The sensor can be powered either by an AC-to-DC power
brick or Power-over-Ethernet using an AirMagnet in-line power injector.
After configuration the unit boots up, connects to the server, and receives any additional
configuration parameters. If the administrator has upgraded the sensor software on the server to
a new release, the sensor automatically downloads the software into memory and then writes it to
flash.
secure HTTPS communications with a remote browser. Key parameters that need to be
configured prior to placing the sensor online include provisioning of the unit’s network
addressing, the server’s network addressing, and the secret key needed for connection to the
server and for administrator logon-override functions. Once the unit is configured it is placed on
the live network and powered up. The sensor can be powered either by an AC-to-DC power
brick or Power-over-Ethernet using an AirMagnet in-line power injector.
After configuration the unit boots up, connects to the server, and receives any additional
configuration parameters. If the administrator has upgraded the sensor software on the server to
a new release, the sensor automatically downloads the software into memory and then writes it to
flash.
Analysis Mode
The majority of the time the sensor is in the analysis mode. The unit scans all configured
channels, measures signal and noise, gathers statistics on management and data traffic, analyzes
security mis-configurations and performance problems, and searches for issues such as rogue
access points and denial of service attacks.
All of the analyzed data is recorded in memory and is reported back to the management server
periodically. The reporting period for accumulated data is configurable. Whenever an event
occurs that generates an alert, such as a security mis-configuration, the alert is sent immediately
to the server.
The administrator can view the consolidated status of the entire network, a subset of the network,
or the specific set monitored and analyzed by an individual sensor. The AirMagnet Enterprise
Console tool is used to view this information collected on the server.
The Analysis mode can be administered from anywhere within the global enterprise network.
channels, measures signal and noise, gathers statistics on management and data traffic, analyzes
security mis-configurations and performance problems, and searches for issues such as rogue
access points and denial of service attacks.
All of the analyzed data is recorded in memory and is reported back to the management server
periodically. The reporting period for accumulated data is configurable. Whenever an event
occurs that generates an alert, such as a security mis-configuration, the alert is sent immediately
to the server.
The administrator can view the consolidated status of the entire network, a subset of the network,
or the specific set monitored and analyzed by an individual sensor. The AirMagnet Enterprise
Console tool is used to view this information collected on the server.
The Analysis mode can be administered from anywhere within the global enterprise network.
© 2004 AirMagnet
®
, Inc. All rights reserved.
11