WIDS Whitelist Profile

S7700 V200R019C10 Web-based Configuration Guide

This document describes how to configure and maintain devices through the web NMS client, including device status statistics, SVF, interface, Ethernet switching, IP service, IP routing, security, ACL, AAA, system management, QoS, WLAN, diagnosis service, and EasyDeploy.

Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).

Context

There are security risks from unauthorized devices on WLAN networks, so administrators deploy monitoring APs to monitor the WLAN networks. After the AP working mode is set to monitoring, the AP monitors wireless devices and reports wireless device information to an AC. The AC can identify unauthorized devices.

However, there may be APs of other vendors or other networks working in the existing signal coverage areas. If these APs are countered, their services will be affected. To prevent this situation, configure an authorized AP list, including an authorized MAC address list, OUI list, and SSID list. When an unauthorized AP is detected but the AP's MAC address is in the authorized MAC address list, the AP is an authorized AP. However, if the AP's MAC address is not in the authorized MAC address list, the AP's OUI and SSID must be both in the authorized OUI and SSID lists; otherwise, the AP is a rogue AP.

Procedure

Create a WIDS whitelist profile.

Choose Configuration > Wireless Services > Profile > WIDS > WIDS Whitelist Profile. The WIDS Whitelist Profile List page is displayed.
Click Create. The Create WIDS Whitelist Profile page is displayed.
Enter the name of the new WIDS whitelist profile in Profile name.
To copy all parameters from another profile to the new profile, select the name of the profile in Copy parameters from other profiles. If None is selected, parameters are not copied from another profile.
Click OK. The parameter setting page of the new WIDS whitelist profile is displayed.

Set parameters for creating a WIDS whitelist profile. Table 9-37 describes the parameters for creating a WIDS whitelist profile.

Table 9-37 Parameters for creating a WIDS whitelist profile

Parameter	Description
WIDS Whitelist Profile	Name of the WIDS whitelist profile, which cannot be modified.
MAC Whitelist	Maintain MAC addresses in the whitelist. Adding MAC addresses one by one # Click Add. The Add MAC Address page is displayed. # Enter a MAC address and click . Multiple MAC addresses can be added. Click to delete the selected MAC address. # Click OK Adding MAC addresses in batches # Click Batch Import. The Import MAC Address page is displayed. # Click and select the MAC file containing MAC addresses that you want to import, and click Import. NOTE: You can click to download the MAC template. # Click Apply. In the Info dialog box that is displayed, click OK. Deleting MAC addresses # Select the MAC address that you want to delete and click Delete. In the Confirm dialog box that is displayed, click OK.
OUI Whitelist	OUI to be added to the OUI whitelist. To add an OUI, enter an OUI and click . You can repeat the operation to add multiple OUIs. Click to delete the selected OUI.
SSID Whitelist	SSID to be added to the SSID whitelist. To add an SSID, enter an SSID and click . You can repeat the operation to add multiple SSIDs. Click to delete the selected SSID.

Click Apply. In the Info dialog box that is displayed, click OK.

Modify a WIDS whitelist profile.
1. Choose Configuration > Wireless Services > Profile > WIDS > WIDS Whitelist Profile. The WIDS Whitelist Profile List page is displayed.
2. Click the name of the WIDS whitelist profile that you want to modify. The WIDS whitelist profile configuration page is displayed.
3. Set parameters for modifying a WIDS whitelist profile. Table 9-37 describes the parameters for modifying a WIDS whitelist profile.
4. Click Apply. In the Info dialog box that is displayed, click OK.
Delete a WIDS whitelist profile.
1. Choose Configuration > Wireless Services > Profile > WIDS > WIDS Whitelist Profile. The WIDS Whitelist Profile List page is displayed.
2. Select the profile that you want to delete and click Delete. In the Confirm dialog box that is displayed, click OK.
Display the profile reference relationship.
1. Choose Configuration > Wireless Services > Profile > WIDS > WIDS Whitelist Profile. The WIDS Whitelist Profile List page is displayed.
2. Select the profile of which you want to display the reference relationship and click Display Reference Relationship. The system displays the types and names of the objects that reference the profile.
  
  Click Hide Reference Relationship. The system hides the displayed results.