Dell 6.2 Server User Manual


 
resources. APs and stations must be accurately classified to determine whether they are valid, rogue, or a neighboring
AP. Then, an automated response can be implemented to prevent possible intrusion attempts.
TotalWatch™ allows for detecting devices that are running on typical operational channels. Tarpit Shielding provides
a better way of containing devices that are deemed unauthorized. Both of these features are discussed in the sections
that follow.
l "Configuring TotalWatch" on page 388
l "Administering TotalWatch" on page 390
l "Working with Tarpit Shielding" on page 392
l "Configuring Tarpit Shielding" on page 392
Configuring TotalWatch
Dell 802.11n APs and non-11n APs in AM-mode support for TotalWatch is the ability to scan all channels of the
RF spectrum, including 2.4-and 5-GHz bands as well as the 4.9-GHz public safety band. TotalWatch also provides 5-
MHz granular channel scanning of bands for rogue devices, and dynamic scanning dwell times to focus on those
channels with traffic. TotalWatch provides an advanced set of features to detect unauthorized wireless devices and a
set of customized rules are used to highlight devices that truly pose a threat to the network.
NOTE: TotalWatch is supported on APs deployed in the AM-mode only.
TotalWatch provides monitoring support for the entire WLAN spectrum. Dell APs in the AM-mode can
monitor
the
following frequencies:
l 2412MHz to 2472MHz in the 2.5GHz band
l 5100Mhz to 5895MHz in the 5GHz band.
Dell APs in AM-mode can
scan
the following additional frequencies:
l 2484 MHz and 4900Mhz to 5000MHz (J-channels)
l 5000 to 5100Mhz
If the AP is HT-capable (High Throughput), then these frequencies are scanned in the 40MHz mode.
Understanding TotalWatch Channel Types and Qualifiers
Based on the regulatory characteristics, channels are categorized into the following types:
Reg-domain Channels—A channel that belongs to the regulatory domain of the country in which the AP is
deployed. The set of channels that belong to this group is a subset of the channels in all-reg-domain channel group.
All-reg-domain Channels—A valid non-overlapping channel that is in the regulatory domain of at least one country.
The channels in this category belong to the frequency range of:
n 2412MHz to 2472MHz in the g-band
n 5100Mhz to 5895MHz in the a-band.
Rare Channel—Channels that fall into a frequency range outside of the regulatory domain; 2484 MHz and
4900MHz-4995MHz (J-channels), and 5000-5100Mhz. The channels in this group do not belong to any other group.
Each of these channel types can have an associated qualifier:
Active Channel—This qualifier indicates that wireless activity is detected on this channel by the presence of an AP
or other 802.11 activity; a probe requests for example.
DellPowerConnectW-SeriesArubaOS6.2 | User Guide WirelessIntrusion Prevention | 388