D-Link DWL-8610AP User Manual

Detecting and Preventing Wireless Intrusion
D-Link Unified Wired and Wireless Access System
Oct. 2015 Page 726
D-Link UWS User Manual
Detecting and Preventing Wireless Intrusion
This section describes how to use of some of the Wireless Intrusion Detection System (WIDS) and Wireless
Intrusion Prevention System (WIPS) functions on the D-Link Unified Wireless Switch.
In this example, a company has configured a wireless network with the VAPs shown in Table 390.
For information about configuring the VAPs see “Configuring a Network to Use WPA2-Enterprise and Dynamic
VLANs” on page 706.
As an additional security measure, the network administrator has decided to employ the use of the WIDS/
WIPS functionality to further protect the corporate network. The examples in this section show how to
configure the Unified Switch and how to monitor the system as it mitigates potential security risks in the
wireless domain.
Configuring a Radio in Sentry Mode
To implement the security policies of the company in this example, the second radio on the Access Point
DWL-8600 is configured in sentry mode to scan for violations of the WIDS tests. Alternately, separate APs can
be configured as dedicated sentry APs. When a radio operates in sentry mode, the radio performs a
continuous radio scan. In sentry mode, no beacons are sent, and no clients are allowed to associate with the
AP through the sentry radio.
If a dedicated sentry radio or AP is not configured, the active radios still scan other channels but will do so at
a slower rate than a radio in sentry mode. The rate at which a radio scans the RF traffic is important to WLAN
security because slower scanning allows Rogue APs to remain undetected for a longer period of time.
To enable sentry mode in the default profile on radio 1:
1. Click WLAN > Administration > Basic Setup > Radio to access the Wireless Default Radio Configuration
page.
2. Select Radio 1.
3. Select the RF Scan Sentry option.
Table 390: WIDS/WIPS VAP Summary
Network (SSID) VLAN Security Redirect
Visitor 10 None http://www.dlink.com/tw
Corporate 20 WPA Enterprise None
Note: By default, the sentry radio scans 802.11a and 802.11 g/b channels. To configure the sentry
radio to scan only 802.11a or 802.11b/g channels, but not both, click WLAN > Administration >
Advanced Configuration > AP Profiles > Profile Name > Radio to access the Access Point Profile Radio
Configuration page for the selected profile.

D-Link DWL-8610AP Specifications

General

2.4 GHz	Yes
Modulation	-
Frequency band	2.4 - 2.497, 4.9 - 5.85 GHz
Number of users	- user(s)
Channels quantity	- channels
Networking standards	IEEE 802.11a, IEEE 802.11ac, IEEE 802.11b, IEEE 802.11g, IEEE 802.11n, IEEE 802.3, IEEE 802.3ab, IEEE 802.3at, IEEE 802.3u, IEEE 802.3x
Wi-Fi data rate (max)	1750 Mbit/s
Ethernet LAN data rates	10, 100, 1000 Mbit/s
Maximum data transfer rate	1000 Mbit/s
Flash memory	64 MB
Internal memory	512 MB
Internal	No
Certification	CE, FCC, IC
Product color	Gray
Ethernet LAN (RJ-45) ports	2
Antennas quantity	6
Antenna gain level (max)	6.5 dBi
Power supply type	PoE, DC
Power consumption (typical)	14 W
Operating temperature (T-T)	0 - 40 °C
Operating relative humidity (H-H)	10 - 90 %
Package depth	265 mm
Package width	238 mm
Package height	112 mm
Package weight	1160 g
Pallet width	1200 mm
Pallet length	1100 mm
Pallet height (air)	1955 mm
Pallet gross weight (air)	385580 g
Quantity per pallet (air)	210 pc(s)
Shipping (inner) case width	280 mm
Shipping (inner) case height	260 mm
Shipping (inner) case length	585 mm
Shipping (inner) case weight	8740 g
Shipping (inner) case net weight	5800 g
Number of cartons per pallet (air)	42 pc(s)
Quantity per shipping (inner) case	5 pc(s)

Weight and Dimensions

Depth	171 mm
Width	198 mm
Height	40 mm
Weight	240 g