Cisco Wireless Lan Controller

Version : Cisco Wireless Controller 5500 Series, IOS version 8.0.140 and later.

Cisco has come up with the concept of the Cisco Unified Wireless Network (CUWN) solution, which helps make it easier to manage such large scale deployments. WLC is a device that assumes a central role in the CUWN. Access points, called Lightweight Access Points (LAPs) in the unified environment, register themselves with a WLC and tunnel all the management and data packets to the WLCs, which then switch the packets between wireless clients and the wired portion of the network. All the configurations are done on the WLC.

Netsurion Open XDR monitors user logon behaviour, access point configuration changes, WLAN group management and service status and generates flex reports, flex dashboards and alerts for rogue access point detected and system state changed.

Netsurion Data Source Integrations for Cisco Wireless Lan Controller allows you to monitor the following components:-

  • Security – Rogue AP and attack detections.
  • Compliance – Access Point login/registration failures and success.
  • Operation – User account management, ACL configuration and DHCP activities.

Once Cisco Wireless Lan Controller is configured to deliver events to Netsurion Open XDR Manager; alerts, dashboards and reports can be configured into Netsurion Open XDR.

The following are the key Data Source Integration available in Netsurion Open XDR.

Alerts

Type Name Description
Security Cisco Wlc – Attack detection This alert is generated when any Attack is detected in the Wireless Controller.
Security Cisco Wlc – Port status changed This alert is generated when any Port status is changed.
Operations Cisco Wlc – ACL configuration failed This alert is generated when any Access list configuration fails.
Operations Cisco Wlc – System failures This alert is generated when any System failure occurs.
Compliance Cisco Wlc – AP login success This alert is generated when any Access Point successfully logs in.
Compliance Cisco Wlc – AP login failure This alert is generated when any Access Point login fails.
Compliance Cisco Wlc – AP registration failures This alert is generated when any Access Point registration fails.

Reports

Type Name Description
Security Cisco Wlc – Attack detection This report provides details about any Attack that is attempted to compromise the Wlc.
Security Cisco Wlc – Port status changed This report provides details on the Port status associated with the Wlc.
Security Cisco Wlc – Rogue AP activities This report provides details about all the Rogue Access Point that is detected in the network.
Operations Cisco Wlc – ACL configuration failed This report provides details about any Access List configuration failures that occurs in Cisco Wlc.
Operations Cisco Wlc – System failures This report provides details about all the System failures, hardware failures and memory allocation failures in the Wlc.
Operations Cisco Wlc – User account management This report provides details about all the User account management that is done in Wlc.
Operations Cisco Wlc – DHCP activities This report provides details on all the DHCP activities that is done on the Wlc.
Compliance Cisco Wlc – AP login success This report provides details on all successful Access Point logon that is done.
Compliance Cisco Wlc – AP login failure This report provides details on Access Point logon failure attempts.
Compliance Cisco Wlc – AP registration failures This report provides details about all the Access Point registration failures that is done.
Compliance Cisco Wlc – Successful AP registrations This report provides details about all the successful Access Point registration or association with Wlc.

Documentation:

The configuration details are consistent with Netsurion Open XDR 8.x and later, and Cisco Wireless Controller.

Download Integration Guide for configuration instructions and more information.