Dell PowerConnect W-AirWave 7.6, User Manual

Page: 187 / 332

classification engine. RAPIDS classifications and controllers classifications are separate and often are not
synchronized.
NOTE: RAPIDS classification is not pushed to the devices.
The following table compares how default classification may differ between AirWave and ArubaOS for scenarios
involving WMS Offload.
AMP ArubaOS (ARM)
Unclassified (default state) Unknown
Rogue Rogue
Suspected Neighbor Interfering
Neighbor Known Interfering
Valid Valid
Contained Rogue DOS
Table 96:
Rogue Device Classification Matrix
For additional information about WMS Offload, refer to the
Dell PowerConnect W-AirWave Best Practices Guide
in
Home > Documentation .
Device OUI Score
The Organizationally Unique Identifier (OUI) score is based on the LAN MAC address of a device. RAPIDS can be
configured to poll your routers and switches for the bridge forwarding tables. RAPIDS then takes the MAC addresses
from those tables and runs them through a proprietary database to derive the OUI score. The OUI score of each
device is viewable from each rogue’s detail page.
Table 97 provides list the OUI scores definitions.
Score Description
Score of 1 Indicates any device on the network; this is the lowest threat level on the network.
Score of 2 Indicates any device in which the OUI belongs to a manufacturer that produces wireless (802.11) equipment.
Score of 3
Indicates that the OUI matches a block that contains APs from vendors in the Enterprise and small office/
small home market.
Score of 4
Indicates that the OUI matches a block that belonged to a manufacturer that produces small office/ small
home access points.
Table 97:
Device OUI Scores
Rogue Device Threat Level
The threat level classification adds granularity for each general RAPIDS classification. Devices of the same
classification can have differing threat scores based on the classifying rule, ranging from 1 to 10 with a default value
of
5 . This classification process can help identify the greater threat. Alerts can be defined and sorted by threat level.
Dell PowerConnect W-AirWave 7.6 | User Guide Using RAPIDS and Rogue Classification | 175