WIDS Whitelist Profile

Context

There are security risks from unauthorized devices on WLAN networks, so administrators deploy monitoring APs to monitor the WLAN networks. After the AP working mode is set to monitoring, the AP monitors wireless devices and reports wireless device information to an AC. The AC can identify unauthorized devices.

However, there may be APs of other vendors or other networks working in the existing signal coverage areas. If these APs are countered, their services will be affected. To prevent this situation, configure an authorized AP list, including an authorized MAC address list, OUI list, and SSID list. When an unauthorized AP is detected but the AP's MAC address is in the authorized MAC address list, the AP is an authorized AP. However, if the AP's MAC address is not in the authorized MAC address list, the AP's OUI and SSID must be both in the authorized OUI and SSID lists; otherwise, the AP is a rogue AP.

Procedure

Create a WIDS whitelist profile.

Choose Configuration > Wireless Services > Profile > WIDS > WIDS Whitelist Profile. The WIDS Whitelist Profile List page is displayed.
Click Create. The Create WIDS Whitelist Profile page is displayed.
Enter the name of the new WIDS whitelist profile in Profile name.
To copy all parameters from another profile to the new profile, select the name of the profile in Copy parameters from other profiles. If None is selected, parameters are not copied from another profile.
Click OK. The parameter setting page of the new WIDS whitelist profile is displayed.

Set parameters for creating a WIDS whitelist profile. Table 1 describes the parameters for creating a WIDS whitelist profile.

**Table 1** Parameters for creating a WIDS whitelist profile
Parameter	Description
WIDS Whitelist Profile	Name of the WIDS whitelist profile, which cannot be modified.
Whitelist matching policy (OUI and SSID)	Policy for matching OUIs and SSIDs in the WIDS whitelist. Both: Both the OUI and SSID of an AP are matched against the authorized OUI list and authorized SSID list. If no match is found in the lists, the AP is considered a rogue AP. If only one of authorized OUI and SSID lists is configured in the WIDS whitelist, the device matches the OUI or SSID of the AP only against the configured list. Any: The OUI and SSID of an AP is matched against the authorized OUI list or the authorized SSID list accordingly. If a match is found in either of the lists, the AP is considered an authorized AP; if not, the AP is considered a rogue AP.
MAC Whitelist	Maintain MAC addresses in the whitelist. Adding MAC addresses one by one # Click Add. The Add MAC Address page is displayed. # Enter a MAC address and click . Multiple MAC addresses can be added. Click to delete the selected MAC address. # Click OK Adding MAC addresses in batches # Click Batch Import. The Import MAC Address page is displayed. # Click and select the MAC file containing MAC addresses that you want to import, and click Import. NOTE: You can click to download the MAC template. # Click Apply. In the Info dialog box that is displayed, click OK. Deleting MAC addresses # Select the MAC address that you want to delete and click Delete. In the Confirm dialog box that is displayed, click OK.
OUI Whitelist	OUI to be added to the OUI whitelist. To add an OUI, enter an OUI and click . You can repeat the operation to add multiple OUIs. Click to delete the selected OUI.
SSID Whitelist	SSID to be added to the SSID whitelist. To add an SSID, enter an SSID and click . You can repeat the operation to add multiple SSIDs. Click to delete the selected SSID.

Click Apply. In the Info dialog box that is displayed, click OK.

Modify a WIDS whitelist profile.
1. Choose Configuration > Wireless Services > Profile > WIDS > WIDS Whitelist Profile. The WIDS Whitelist Profile List page is displayed.
2. Click the name of the WIDS whitelist profile that you want to modify. The WIDS whitelist profile configuration page is displayed.
3. Set parameters for modifying a WIDS whitelist profile. Table 1 describes the parameters for modifying a WIDS whitelist profile.
4. Click Apply. In the Info dialog box that is displayed, click OK.
Delete a WIDS whitelist profile.
1. Choose Configuration > Wireless Services > Profile > WIDS > WIDS Whitelist Profile. The WIDS Whitelist Profile List page is displayed.
2. Select the profile that you want to delete and click Delete. In the Confirm dialog box that is displayed, click OK.
Display the profile reference relationship.
1. Choose Configuration > Wireless Services > Profile > WIDS > WIDS Whitelist Profile. The WIDS Whitelist Profile List page is displayed.
2. Select the profile of which you want to display the reference relationship and click Display Reference Relationship. The system displays the types and names of the objects that reference the profile.
  
  Click Hide Reference Relationship. The system hides the displayed results.