Cisco Systems OL-8376-01 manual IDS Faults

Chapter 2 Fault Descriptions

IDS (Intrusion Detection System) Faults

Table 2-3	IDS Faults (continued)
Fault Description		Explanation	Related Setting	Recommended Action
Ad-hoc network ssid		An ad-hoc network that was	IDS > Manage	Use the fault details page to mark it
reclassified from Friendly		previously determined to be	Network-Wide IDS	friendly if the network is known, or
to Rogue due to rule		Friendly has been reclassified to	Settings > Ad-hoc	to delete it from the WLSE database
		Rogue.	Network Detection >	if it is unknown.
		ssid is the Service Set Identifier	Friendly to Rogue AP
			Reclassification
		of the unmanaged radio’s BSS.
		rule is one of the following:	or
		• Change in RSSI ordering	IDS > Manage
			Rogues
		between observers
		The estimated proximity of
		the unmanaged radio
		between two observers has
		switched—if the WLSE
		thought that observer A was
		closer to radio R than
		observer B, it now thinks that
		observer B is closer to radio
		R than observer A.
		• Difference in relative RSSI
		between original and current
		observers exceeded threshold
		While radio R’s strength
		changed by factor M between
		observer A and observer B, it
		changed by factor M+T
		between observer B and
		observer C. That is, it does
		not appear that radio R’s
		change in strength is merely
		due to a change in its power
		configuration.
		• Fewer than two observers
		• Too long without
		observations

FAQ and Troubleshooting Guide for the CiscoWorks Wireless LAN Solution Engine

OL-8376-01 2-15