Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) - Manual (Page 242)

226 Brocade Mobility RFS Controller CLI Reference Guide
53-1003098-01
4
device-categorization
device-categorization
Configures a device categorization list
Proper classification and categorization of devices (access points, clients etc.) helps suppress
unnecessary unauthorized access point alarms, allowing network administrators to focus on
alarms on devices actually behaving in a suspicious manner. An intruder with a device erroneously
authorized could potentially perform activities that harm your organization.
Authorized access points and clients are generally known to you and conform with your
organization’s security policies. Unauthorized devices are those detected as interoperating within
the network, but are not approved. These devices should be filtered to avoid jeopardizing the data
within a managed network. Use this command to apply the neighboring and sanctioned (approved)
filters on peer devices operating within a wireless controller or access point’s radio coverage area.
Detected client MAC addresses can also be filtered based on their classification.
If a device categorization list does not exist, it is created.
Supported in the following platforms:
• Access Points — Brocade Mobility 650 Access Point, Brocade Mobility 6511 Access Point,
Brocade Mobility 1220 Access Point, Brocade Mobility 71XX Access Point, Brocade
Mobility 1240 Access Point
• Wireless Controllers — Brocade Mobility RFS4000, Brocade Mobility RFS6000, Brocade
Mobility RFS7000
• Service Platforms — Brocade Mobility RFS9510
Syntax:
device-categorization <DEVICE-CATEGORIZATION-LIST-NAME>
Parameters
device-categorization <DEVICE-CATEGORIZATION-LIST-NAME>
Example
rfs7000-37FABE(config)#device-categorization rfs7000
rfs7000-37FABE(config-device-categorization-rfs7000)#?
Device Category Mode commands:
mark-device Add a device
no Negate a command or set its defaults
clrscr Clears the display screen
commit Commit all changes made in this session
do Run commands from Exec mode
end End current mode and change to EXEC mode
exit End current mode and down to previous mode
help Description of the interactive help system
revert Revert changes
service Service Commands
show Show running system information
write Write running configuration to memory or terminal
<DEVICE-CATEGORIZATION-L
IST-NAME> Specify the device categorization list name. If a list with the same name does not exist, it is created.