demo menu n.
Download
Skip this Video
Loading SlideShow in 5 Seconds..
Demo Menu PowerPoint Presentation
Download Presentation
Demo Menu

Loading in 2 Seconds...

play fullscreen
1 / 89

Demo Menu - PowerPoint PPT Presentation


  • 127 Views
  • Uploaded on

General Overview WLAN Discovery AP Configuration Wireless Security Network Monitoring Maintenance and Troubleshooting Administering the Server. More Detail Rogue AP and Intrusion Detection Including AirMagnet Integration WEP Key Rotation HP OpenView Plug-in. Demo Menu.

loader
I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
capcha
Download Presentation

PowerPoint Slideshow about 'Demo Menu' - melvyn


An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript
demo menu
General Overview

WLAN Discovery

AP Configuration

Wireless Security

Network Monitoring

Maintenance and Troubleshooting

Administering the Server

More Detail

Rogue AP and Intrusion Detection

Including AirMagnet Integration

WEP Key Rotation

HP OpenView Plug-in

Demo Menu
wavelink manages wireless lans
Wavelink Manages Wireless LANs

Wi-FiInfrastructure Configuration & Security Management

Mobile ClientSecurity Configuration

WLANMaintenanceandTroubleshooting

Mobile ClientSoftware Management

Health and Performance Monitoring

RF-Based Intrusion Detection

wavelink wlan management high level architectural components

Mobile Manager EnterpriseConsole

Mobile ManagerConsole

Agent Console

Agent Console

Agent Console

Agent Console

Management Server

Access Point Agent

Access Point Agent

Access Point Agent

Access Point Agent

Wavelink WLAN ManagementHigh-level Architectural Components
administrative console
Administrative Console

Device

Window

Network Tree

Window

Alert Viewer

Window

network tree window
Network Tree Window

Network Icon – Titles the overall network Name

Host Icon – The various agents on the network that you are viewing

Group Icon – Each group contains a collection of Access Points defined by the Mobile Manager or manually by the user

device window
Device Window

The Device View window displays more detailed information about wireless components. You can drill down into the display window to show information on hosts, parent/child component relationships, groups, APs, and mobile devices.

alerts viewer window
Alerts Viewer Window

The Alerts Viewer window displays network alerts that Mobile Manager detects on your wireless network.

one click access to key functions
One-Click Access to Key Functions

Network Tree Window

Device Window

types of network discovery

CDP, WNMP, IAPP

Administrator

Router

Query switches and routers

SNMP

Server

Types of Network Discovery
  • Discover network devices by listening on layer 2 and layer 3 and applies the relevant profile automatically:
        • Cisco CDP packets and CDP Neighbor Tables
        • WNMP packets (Symbol)
        • IAPP packets (Proxim, HP, Dell, Avaya, SYSTIMAX)
        • SNMP layer 3 (All IP address reachable devices)
auto discovery wizard
Auto-Discovery Wizard

The Auto-Discovery Wizard provides you with a single point of configuration for all discovery features.

layer 3 network search
Layer 3 Network Search

The Network Search Settings dialog box is designed to set up IP address ranges you want to search for equipment you want to manage.

manually add an access point
Manually Add an Access Point

The Add Network Device dialog box is designed to manually add the APs and wireless switches that you want to manage.

manual ap configuration
Manual AP Configuration

You can view and change the settings for the AP manually.

Note: The AP must be reachable and you must have Read/Write permissions.

manual ap configuration1
Manual AP Configuration

You can view the following settings:

Hardware Type

Firmware Version

ESS ID / SSID*

* Configurable setting

manual ap configuration2
Manual AP Configuration

You can configure basic settings for an AP through the options in each configuration category for that AP.

Note: The Settings have only properties available for that hardware type and firmware version.

automating ap configuration
Automating AP Configuration
  • Mobile Manager has two (2) methods of automated configuration
    • Importing site survey/WLAN planning data
    • AP Configuration Profiles
ap configuration loading site survey data
AP Configuration – Loading Site Survey Data

By importing a simple CSV file, Mobile Manager can apply AP settings across your network as new wireless equipment is installed on the LAN.

ap configuration profiles
AP Configuration Profiles

You can design two types of Profiles:

Default: One per hardware type. Applied to any unprofiled AP of that type

Production: As many as needed per hardware type and must have each AP or group of APs manually added

Once you create a profile, Mobile Manager acts as a watchdog, preventing any outside changes to your wireless network.

configuring profiles
Configuring Profiles

Select Agent Properties from the Options menu.

Right click on the Server. Select Agent Properties.

configuring profiles1
Configuring Profiles
  • The Agent Properties window has 4 tabs:
        • Profile
        • IP Manager
        • VLACL
        • Automatic WEP Rotation

To be addressed later

configuring profiles hardware type
Configuring Profiles – Hardware Type

Enter the Profile a name.

Select the hardware type.

Note: Only after these two fields are filled in will you be able to complete the rest of the Profile settings.

configuring profiles firmware version
Configuring Profiles –Firmware Version

Select firmware from the drop down list.

Note: You can only select firmware that is compatible with the hardware type.

configuring profiles general settings
Configuring Profiles –General Settings
  • Set the ESS ID/SSID
  • Assign IP (3 choices)
    • DHCP
    • Serve IP (from IP Manager)
    • None
configuring profiles advanced settings
Configuring Profiles –Advanced Settings

Click on the “Advanced…” button to configure AP properties which will be common across multiple APs.

configuring profiles advanced settings1
Configuring Profiles – Advanced Settings

You can configure common AP settings from this explorer view.

Each setting has its definition described on the right view window.

Note: Only properties available for the specified hardware type and firmware version are shown.

placing devices into profile
Placing Devices into Profile

Server Level

Group Level

AP Level

Note: Only AP’s with the correct hardware type will get profiled

configuring profiles statistical alerts
Configuring Profiles –Statistical Alerts

Click on the “Stat Alerts…” button to set up the Statistical alert thresholds that are valid only for this profile.

configuring profiles statistical alerts1
Configuring Profiles –Statistical Alerts

Create alerts concerning network performance based on time and date parameters .

More later…

global settings ip manager
Global Settings – IP Manager

Mobile Manager can serve static IP addresses to all APs while using profiles.

In an existing network you can populate this information with the current IP addresses by clicking on the Enable Auto-Add check box.

global settings ip manager1
Global Settings – IP Manager

Use the “Add…” button to create a list of static IP address to be served to all APs configured to receive their IP address from Mobile Manager.

static wep key management
Static WEP Key Management

You can either enable or disable WEP from this dialog. You also have the choice of 64 bit or 128 bit key length.

automatic wep key rotation
Automatic WEP Key Rotation

Create, Modify or

View settings

Enable Rotation

WEP Key Size

Start

Date/Time

Rotation

Interval

Passcode

More detail

configuring access control lists
Configuring Access Control Lists

Click on the “ACL…” button to set up the Access Control List for a profile or for an individual AP.

configuring access control lists1
Configuring Access Control Lists

Enter each MAC address to be included in the list or import an existing list. Use profiles to propagate all allowable MAC addresses.

Note: Access Control must be enabled on the AP.

very large access control list vlacl
Very Large Access Control List(VLACL)

Depending on the type of Access Point you use, an Access Control List can contain as many as 512 MAC addresses.

Mobile Manager contains a feature, the Very Large Access Control List, which allows you to increase the size of the Access Control List as large as necessary.

integrated and cost effective authentication server
Integrated and Cost-Effective Authentication Server
  • Mobile Manager Authentication Server
    • Authentication for 802.1X-enabled Clients
    • Windows Zero Config (User-managed)
    • Funk Supplicant (Avalanche-Managed)
  • Supports Many Authentication Techniques
    • TLS (Client and Server Certificates)
    • PEAP (Server only Certificates)
    • TTLS (Server only Certificates)
  • Not just for 802.1X
    • Uses standard RADIUS protocol
    • MAC-Based Access Control
  • Flexible Architecture
    • Local or Centralized Agent
    • Manage multiple Servers from one Console
    • Quick to set up and deploy
    • Easy to use Web-based Interface
  • Integrates with Existing Systems
    • Active Directory
    • LDAP

Clients with 802.1X Supplicants

802.1X APs

Authentication Server

(One or Many)

Authentication Server Manager

Web Console UI

alerts overview
Alerts Overview

All network events detected by Mobile Manager appear in the Alerts Window.

Specific alerts can also be forwarded to other systems using Alert Profiles.

alert profiles e mail recipients
Alert Profiles – E-mail Recipients
  • You need 3 pieces of information to set up the Mobile Manager E-mail system:
    • E-mail Server
    • Response E-mail address
    • List of E-mail Addresses
alert profiles trap receivers
Alert Profiles – Trap Receivers

Enter the address of the proxy host if needed.

If you use other network management tools this could be the address to send the SNMP Traps.

alert profiles
Alert Profiles

Once you have created the email and proxy settings, you can use the Alert Profile interface to design your alert strategies.

alert profiles1
Alert Profiles

Add multiple profiles

names

Select from the list of available alerts thrown by Mobile Manager

Notify people based on the severity of the alert

Send alert to other network monitoring systems

hp openview integration
HP OpenView Integration
  • Discovery and management of Wavelink site servers, associated access points and mobile devices
  • Topology views via HP Network Node Manager (NNM) maps and sub-maps
    • Agent, Agent & managed APs, AP & associated MUs
  • Event browser integration (traps)
    • Alerts are visually displayed within the HP NNM interface
    • Alerts follow same structure and color coding as HP NNM
  • Integration into HP NNM menu structure
    • Ability to configure MM Agent access rights
    • Ability to launch MM console from within HP NNM

More detail

statistical alerts
Statistical Alerts

You can set multiple days, times, and different parameters for configuring peak and non-peak time periods.

setting network thresholds
Setting Network Thresholds

Statistical Alerts only apply to the APs that reside in the applicable profile.

reading log files
Reading Log Files

You can read individual log files that get stored during the operation of Mobile Manager.

log file viewer
Log File Viewer

With the Log Viewer, you can use these log files for debugging purposes or for assessing wireless network performance

performance dashboard group view
Performance Dashboard –Group View
  • Configurable Displays
  • AP capacity < x
  • AP utilization > x
  • AP utilization < x
  • AP WEP errors > x
  • AP packet errors > x
  • Associated mobile device count > x
historical report creation
Historical Report Creation
  • Available Reports
  • Capacity average
  • Capacity detail
  • Client summary
  • CRC errors detail
  • Event history
  • Foreign APs
  • Inbound packet error detail
  • Outbound packet error detail
  • Packet errors average
  • Retries detail
  • Rogue APs
  • Utilization average
  • Utilization detail
  • WEP error detail
device reset
Device Reset

Right click on any AP in the Device view and select Reset.

A Reset is not destructive and should not stop Mobile Manager from monitoring it in the future.

device factory reset
Device Factory Reset

Right click on any AP in the Device view and select Reset.

A Factory Reset could make an AP unavailable to Mobile Manager so use caution if you select this feature.

manual update of firmware
Manual Update of Firmware

Use this dialog to update firmware to one or more APs of the same hardware type.

manual device query
Manual Device Query

The server will be asked to send a query to the device to get its settings and make sure the device is within a profiles specifications (if a profile is set)

Note: This just overrides the query settings of the server on the specific device highlighted.

connect via web browser
Connect via Web Browser

Your default browser will be used to connect to the highlighted AP.

manual enable disable of dhcp
Manual Enable/Disable of DHCP

Depending on the current state of the device (DHCP enabled/disabled)

You can manually toggle this state.

configuring server user access
Configuring Server User Access
  • Read only
  • Read/reset
  • Read/write
  • Administrator
configuring passwords
Configuring Passwords

Allows you to change only the password of the account that is currently logged in.

configuring console server security
Configuring Console-Server Security

Allows you to change the security level for communications between the server and the console.

This setting is originally set at the time of installation.

configuring the server settings
Configuring the Server Settings

Select Agent Options from the Options pull-down menu.

configuring the server settings general
Configuring the Server Settings – General

Auto Switch Discovery Setup

If Disabled (Default Setting) Mobile Manager will query neighbor tables of switches up to 2 jumps. After 2 each must be queried manually to see past them.

If Enabled it will ignore the 2 jump limit and drill down the network.

Routers must always be queried manually.

configuring the server settings logging
Configuring the Server Settings – Logging

Enable Logging

Log Directory

Maximum Number of Logs

Maximum Size of Logs

Filtering of Log Files

The default settings will use up 10 MBs of disk space for each log file (8 total logs).

configuring the server settings tftp
Configuring the Server Settings – TFTP

TFTP Address– IP address of TFTP Server for Firmware updates. You can choose another agent to load firmware or stay with default.

By default it is the IP address where you loaded Mobile Manager server.

configuring the server settings access point
Configuring the Server Settings – Access Point

Device Query Interval– Interval between AP queries. Default is 10 minutes.

Device Statistics – How often to upload AP statistics into the Mobile Manager database.

Mobile Unit Query Interval - Time between updates of mobile unit information. Default is 120 seconds.

AP Communication Timeout Time before missing a query to mark offline. Default is 180 seconds.

configuring the server settings statistics
Configuring the Server Settings – Statistics

Statistics Settings– How long the database should hold AP statistics that it has gathered.

Alert Settings – How many days the Alerts should be kept and/or setting a maximum number of alerts to store.

wavelink manages wireless lans1
Wavelink Manages Wireless LANs

Wi-FiInfrastructure Configuration & Security Management

Mobile ClientSecurity Configuration

WLANMaintenanceandTroubleshooting

Mobile ClientSoftware Management

Health and Performance Monitoring

RF-Based Intrusion Detection

rogue ap detection
Rogue AP Detection
  • What makes a comprehensive rogue AP system?
    • Collect data from multiple sources
    • Gather data for rogue clients and rogue APs
    • Support all bands - 802.11a,b,g
    • Correlate wireless data with wired-side data
  • Present an accurate view of the potential threat
    • Known rogue APs – on your wire
    • Rogue AP data port locations – take action
    • Foreign APs – neighbor’s APs; source of potential interference
  • Wavelink’s model utilizes
    • Built-in Access Point Rogue Scans
    • Specialized IDS System Probes as Plug-Ins
    • Mobile client scans via Avalanche

Sensors

APs

Rogue AP &

Rogue Client Data

Clients

!

Rogue AP on Switch X Port Y

Correlate Wired-Side Data

Back to Demo

enable vigilant protection ids system integration
Enable Vigilant Protection:IDS System Integration

DoS Attack

  • Partnership with AirMagnet
    • Extended functionality
    • Sales, Marketing, Technology
  • Integrates into Wavelink Rogue AP Model
  • Detects a broader range of Air Anomalies & Threats
    • Mis-configurations
    • Policy Mismatches
    • Denial of Service Attacks
    • 17 Alerts Monitored in Mobile Manager
  • Integrated Value
    • Single Console / Alert Notification / Source
    • Ability to detect and ACT

Malicious User

Sensor

!

Dos Detected

AP xx Sensor yy

AirMagnet Security Alerts

Notify Administrator

Back to Demo

wep key rotation overview
WEP Key Rotation Overview

Each time one rotation interval passes, the management software will change one of the four device keys in succession and also establish a new index key for transmitting.

By changing only one of the four keys at a time, communication between the mobile device and access point can continue uninterrupted by the underlying key rotation.

By ensuring that the access points and mobile devices are using different index keys, Wavelink further mitigates the risk of a security breach.

Back to Demo

automatic wep key rotation architecture

.wkf

.wkf

Wavelink

Client

Enabler

Wavelink

Client

Enabler

Automatic WEP Key Rotation –Architecture

Avalanche

Console

Mobile Manager

Console

Security policy

.wkf

  • Master key
  • Key generation variables
  • Start/Stop
  • Rotation Interval
  • Pass code

SNMP

Wired network or serial connection

recommended

supported

Radio

settings

Radio

settings

Back to Demo

mobile manager for hp openview
Mobile Manager for HP OpenView
  • Tightly integrates to HP OpenView Network Node Manager (NNM)
  • Leverages current investment in HP OpenView NNM
  • Combines visibility and management of wired and wireless infrastructure into a single integrated platform and console
  • Single console offers
    • Lowest cost of ownership
    • Minimizes inefficiencies of using multiple tools
    • Provides integrated monitoring of wired and wireless networks

Back to Demo

mobile manager for hp openview1
Mobile Manager for HP OpenView

How it works

  • MM for HPOV installs on same machine as HP Open View Network Node Manager and MM console
  • MM for HP OpenView discovers MM agents, wireless access points and associated devices
  • Network Node Manager then displays MM agents, APs and devices in topology map views
  • Alerts generated by MM agents are fowarded to Network Node Manager alarm browser
    • follows NNM scheme
    • alerts feed into Wavelink category or general categories

Back to Demo

mobile manager for hp openview2
Requirements

HP Network Node Manager (NNM) 6.0 or higher

Mobile Manager 5.5 or higher

Mobile Manager for HPOV 1.0 plug-in

Mobile Manager console should be installed on the same machine as HP NNM (in order to perform drill-down or launch console from NNM menus)

Runs on Windows 2000, XP

Pricing

US$1,000.00 one-time fee (MM Console and AP licenses are purchased separately)

Mobile Manager for HP OpenView

Technical Requirements & Pricing

Back to Demo