Chapter 2 Fault Descriptions

IDS (Intrusion Detection System) Faults

Table 2-3

IDS Faults (continued)

 

 

 

 

 

 

Fault Description

Explanation

Related Setting

Recommended Action

 

 

 

 

Ad-hoc network ssid

An ad-hoc network that was

IDS > Manage

Use the fault details page to mark it

reclassified from Friendly

previously determined to be

Network-Wide IDS

friendly if the network is known, or

to Rogue due to rule

Friendly has been reclassified to

Settings > Ad-hoc

to delete it from the WLSE database

 

 

Rogue.

Network Detection >

if it is unknown.

 

 

ssid is the Service Set Identifier

Friendly to Rogue AP

 

 

 

Reclassification

 

 

 

of the unmanaged radio’s BSS.

 

 

 

 

 

 

 

rule is one of the following:

or

 

 

 

 

 

 

 

Change in RSSI ordering

IDS > Manage

 

 

 

Rogues

 

 

 

between observers

 

 

 

 

 

 

 

The estimated proximity of

 

 

 

 

the unmanaged radio

 

 

 

 

between two observers has

 

 

 

 

switched—if the WLSE

 

 

 

 

thought that observer A was

 

 

 

 

closer to radio R than

 

 

 

 

observer B, it now thinks that

 

 

 

 

observer B is closer to radio

 

 

 

 

R than observer A.

 

 

 

 

Difference in relative RSSI

 

 

 

 

between original and current

 

 

 

 

observers exceeded threshold

 

 

 

 

While radio R’s strength

 

 

 

 

changed by factor M between

 

 

 

 

observer A and observer B, it

 

 

 

 

changed by factor M+T

 

 

 

 

between observer B and

 

 

 

 

observer C. That is, it does

 

 

 

 

not appear that radio R’s

 

 

 

 

change in strength is merely

 

 

 

 

due to a change in its power

 

 

 

 

configuration.

 

 

 

 

Fewer than two observers

 

 

 

 

Too long without

 

 

 

 

observations

 

 

 

 

 

 

 

FAQ and Troubleshooting Guide for the CiscoWorks Wireless LAN Solution Engine

 

OL-8376-01

2-15

 

 

 

Page 89
Image 89
Cisco Systems OL-8376-01 manual IDS Faults