Extreme Networks

noc11 · ‎05-14-2018

Hi,

I have two questions

1. Does the Aerohive system classify an external AP as rogue if it is broadcasting the same SSID.

2. How can we set up email alerting when a Rogue AP is detected with certain paramater e.g. SSID name, Power level, detected by 'X' APs etc.

Thanks for your help.

Sajid

GeorgiaMason · ‎05-15-2018

They have three designations: Rogue, Unauthorized, or Neighbor. Rogue is an unknown AP in the same backhaul network (this means it could be broadcasting the same SSID or not, it will still be seen as rogue). Unauthorized is an AP that that is unknown, but not necessarily in your backhaul network. Neighbor is an unknown AP you have manually classified as not a threat. This page has more details: https://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/configuration/viewing-rogue-ap-list.htm?Highlight=Rogue%20AP
That depends on what platform you're using. If you have NG, I don't think you can, that has limited alerts (to see this go to the silhouette in the top right corner, global settings, email notifications). If you're using classic, you can enable "In-net rouge AP" email alerts, which as far as I can tell means Rouge AP alerts- (https://docs.aerohive.com/330000/docs/help/english/8.2r1/hm/full/Content/home/admin/services.htm?cshid=home/admin/services.htm). You can find that in Home, administration, hivemanager services, email service settings.

GeorgiaMason · ‎05-15-2018

They have three designations: Rogue, Unauthorized, or Neighbor. Rogue is an unknown AP in the same backhaul network (this means it could be broadcasting the same SSID or not, it will still be seen as rogue). Unauthorized is an AP that that is unknown, but not necessarily in your backhaul network. Neighbor is an unknown AP you have manually classified as not a threat. This page has more details: https://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/configuration/viewing-rogue-ap-list.htm?Highlight=Rogue%20AP
That depends on what platform you're using. If you have NG, I don't think you can, that has limited alerts (to see this go to the silhouette in the top right corner, global settings, email notifications). If you're using classic, you can enable "In-net rouge AP" email alerts, which as far as I can tell means Rouge AP alerts- (https://docs.aerohive.com/330000/docs/help/english/8.2r1/hm/full/Content/home/admin/services.htm?cshid=home/admin/services.htm). You can find that in Home, administration, hivemanager services, email service settings.