4-7
The versions of the master AP and the mini AP are inconsistent. As a result, the configurations cannot be normally delivered
to the mini AP.
Solution: Upgrade the i-Share+ AP to the recommended version. When the i-Share+ version is upgraded, the software versions
of the master AP and the mini AP are automatically synchronized. After the upgrade is complete, run the show version all slot
command to check whether the versions of the master AP and the mini AP are synchronized.
Q6: Why can't the uplink port of the i-Share+ AP normally negotiate with the peer device to enter the UP state?
Answer:
Cause 1: The gigabit uplink interfaces (interfaces 25 and 26) of the i-Share+ AP can only connect to 1000M electrical interfaces
and cannot connect to 100M electrical interfaces.
Solution 1: Ensure that the connected interface is a gigabit electrical interface. If the connected interface a 100M electrical
interface, the negotiation fails.
Cause 2: The rate of the uplink device must be set to gigabit or auto instead of 100M or 10M, and the duplex mode must be
set to full duplex instead of half-duplex.
Solution 2: The rate of the uplink device must be set to gigabit or auto.
4.2 WIDS Features
Q1: How to optimize WIDS when the Rogue Device Detection and containment does not work as good as expectation?
1. in a same channel
When the containment effect is not good as expectation, check whether the rogue AP and the WIDS AP use the same channel.
If not, configure them to use the same channel or specify a scanning channel (in ap-config mode, run scan-channels 802.11b
channels NUM1 NUM2…), and enable the contain of the specified channel (in ap-config mode, run countermeasures channel-
match).
2. Containment interval
The contain interval can be shortened (by default, the contain is performed once every 1s). In ap-config mode, run
countermeasures interval 100 to set the contain interval to 100 ms.
3. Unicast containment
If the contain effect is not obvious, enable the unicast contain. In the WIDS mode, run device unknown-sta dynamic-enable.
Run show wids unknown-sta to check whether any STA-MAC to be contained is learnt. You can also manually configure the
STA-MAC to be contained (device unknown-sta mac-address H.H.H). When unknown STA learning is enabled, the AP learns
the adjacent terminals. In contain mode, the contain packets are sent to the STAs using the bssid of the rogue AP. However,
