Example for Configuring Wireless Packet Obtaining on a WLAN
Service Requirements
An enterprise user accesses an IP network through a WLAN. The maintenance personnel want to obtain packets on air interfaces to analyze the cause of a network access failure on a STA. To meet the requirement, you can enable the wireless packet obtaining function on the radio of a specified AP and configure the AP to upload obtained packets to the SFTP server.
Networking Requirements
The AP needs to upload obtained packets to the SFTP server deployed on the network. Therefore, ensure that the AP and SFTP server are routable to each other.
Data Planning
Item |
Data |
---|---|
Uploading obtained packets to the SFTP server |
|
Configuring wireless packet obtaining |
Filtering rule 1 for packet obtaining: packets with the source MAC address being the destination STA's MAC address. |
Configuration Roadmap
The configuration roadmap is as follows:
- Configure the upstream network of the AC functioning as the gateway for APs to make the AP routable to the SFTP server. The configuration details are not described here.
- Configure the rule for obtaining wireless packets.
- Enable the wireless packet obtaining function.
- Disable the wireless packet obtaining function before uploading obtained packets to the SFTP server.
Configuration Notes
An AP can obtain the following types of packets:
- All packets sourced from the local AP and destined for the local AP (BSSID)
- All 802.11 protocol packets sourced from other APs and STAs or destined for other APs and STAs (BSSIDs) except the ARP, DHCP, and EAPOL packets
When enabling the wireless packet obtaining function, you can configure the AP to obtain packets transmitted only over a specified channel. However, the prerequisite for this configuration is that the AP must work in monitor mode. If no channel is specified, the AP obtains packets transmitted over the current working channel.
Procedure
- Configure the wireless packet obtaining function.
# Choose
, and configure the global packet filtering condition and the mode for storing and uploading obtained packets.
# Click Create under Filter Rule Profile Management to create a packet filtering rule.
- Enable the wireless packet obtaining function.
# Click Add, select the AP and radio 0, and apply the packet filtering rule.
- Check obtained wireless packets.
# Click Stop under Operation and click
to enable the AP to upload obtained packets to the server. Then check and analyze packets on the server.