Cisco Cisco Catalyst 6500 Series 7600 Series Wireless Services Module (WiSM) 故障排查指南
Cisco Adaptive wIPS Enhanced Local Mode (ELM)
Configuration and Deployment Guide
Configuration and Deployment Guide
Document ID: 113027
Contents
Introduction
Prerequisites
Requirements
Components Used
Conventions
ELM wIPS Alarm Flow
Deployment Considerations for ELM
ELM vs Dedicated MM
On−Channel and Off−Channel Performance
ELM Across WAN Links
CleanAir Integration
ELM Features and Benefits
ELM Licensing
Configure ELM with WCS
Configuration from WLC
Attacks Detected in ELM
Troubleshoot ELM
Related Information
Prerequisites
Requirements
Components Used
Conventions
ELM wIPS Alarm Flow
Deployment Considerations for ELM
ELM vs Dedicated MM
On−Channel and Off−Channel Performance
ELM Across WAN Links
CleanAir Integration
ELM Features and Benefits
ELM Licensing
Configure ELM with WCS
Configuration from WLC
Attacks Detected in ELM
Troubleshoot ELM
Related Information
Introduction
The Cisco Adaptive Wireless Intrusion Prevention System (wIPS) solution adds the Enhanced Local Mode
(ELM) feature, allowing administrators to use their deployed access points (APs) to provide comprehensive
protection without the need for a separate overlay network (Figure 1). Prior to ELM and in the traditional
Adaptive wIPS deployment, dedicated monitor mode (MM) APs are required to provide PCI Compliance
needs or protection from unauthorized security access, penetration, and attacks (Figure 2). ELM effectively
provides a comparable offering that eases wireless security implementation while lowering CapEx and OpEx
costs. This document only focuses on ELM and does not modify any existing wIPS deployment benefits with
MM APs.
(ELM) feature, allowing administrators to use their deployed access points (APs) to provide comprehensive
protection without the need for a separate overlay network (Figure 1). Prior to ELM and in the traditional
Adaptive wIPS deployment, dedicated monitor mode (MM) APs are required to provide PCI Compliance
needs or protection from unauthorized security access, penetration, and attacks (Figure 2). ELM effectively
provides a comparable offering that eases wireless security implementation while lowering CapEx and OpEx
costs. This document only focuses on ELM and does not modify any existing wIPS deployment benefits with
MM APs.
Figure 1 − Enhanced Local Mode AP Deployment