Administering TotalWatch

The AM Air Monitor. AM is a mode of operation supported on wireless APs. When an AP operates in the Air Monitor mode, it enhances the wireless networks by collecting statistics, monitoring traffic, detecting intrusions, enforcing security policies, balancing wireless traffic load, self-healing coverage gaps, and more. However, clients cannot connect to APs operating in the AM mode. module will initialize the channel list for each of the AP’s radio based on the scan mode setting for the radio. For example, if scan mode is set to rare, then the channel list will contain all possible channels. You can view these channels by using the show ap arm scan-times command.

The following sections provide information on configuring per radio settings, configuring per AP settings, and licensing:

Configuring Per Radio Settings

For each radio, you can configure the following settings (for detailed information on commands, refer to theArubaOS 8.6.0.0Command Line Reference Guide):

  • the dwell times for the various channel types
  • the channel list that should be used for scanning

These settings are configured via the command rfam-scan-profile, which can be attached to the two profiles, dot11a-radio-profile and dot11g-radio-profile.

The am-scan-profile includes the following parameters that can be configured:

  • rf am-scan-profile <name>
  • scan-mode [reg-domain | all-reg-domain | rare]

The default setting is the all-reg-domain. This is consistent with the default functioning of the AM Air Monitor. AM is a mode of operation supported on wireless APs. When an AP operates in the Air Monitor mode, it enhances the wireless networks by collecting statistics, monitoring traffic, detecting intrusions, enforcing security policies, balancing wireless traffic load, self-healing coverage gaps, and more. However, clients cannot connect to APs operating in the AM mode. scanning where the radio scans channels belonging to all regulatory domains.

Configuring Per AP Settings

If the AP is a dual-band single radio AP, an option is available to specify which band Band refers to a specified range of frequencies of electromagnetic radiation. should be used for scanning in AM Air Monitor. AM is a mode of operation supported on wireless APs. When an AP operates in the Air Monitor mode, it enhances the wireless networks by collecting statistics, monitoring traffic, detecting intrusions, enforcing security policies, balancing wireless traffic load, self-healing coverage gaps, and more. However, clients cannot connect to APs operating in the AM mode.-mode. This setting is available in the ap system-profile, via the am-scan-rf-band command.

ap system-profile <name>

am-scan-rf-band [a | g | all]

The default value is “all”, which is consistent with the prior behavior. This setting is ignored in the case of a dual radio AP.

There are four parameters that controls the age out of devices in the AM Air Monitor. AM is a mode of operation supported on wireless APs. When an AP operates in the Air Monitor mode, it enhances the wireless networks by collecting statistics, monitoring traffic, detecting intrusions, enforcing security policies, balancing wireless traffic load, self-healing coverage gaps, and more. However, clients cannot connect to APs operating in the AM mode. module.

ids general-profile <name>

ap-inactivity-timeout

sta-inactivity-timeout

ap-max-unseen-timeout

sta-max-unseen-timeout

The inactivity timeout is the number of times the device was not “seen” when the channel was scanned. The unseen timeout is the time, in seconds, since the device was last “seen.”

The show ap monitor scan-info/channel commands provide details of the channel types, dwell times, and the channel visit sequence.

(host) # show ap monitor scan-info ap-name rb-121

Licensing

The ability to perform rare scanning is available only with the RFprotect license. However, the AP can scan reg-domain or all-reg-domain channels without the RFprotect license.