Aruba Networks Wireless LAN
What is Discovered and Monitored
FortiSIEM uses SNMP and NMAP to discover the device and to collect logs and performance metrics. FortiSIEM communicates to the WLAN Controller only and discovers all information from the Controller. FortiSIEM does not communicate to the WLAN Access points directly.
|
Protocol |
Information Discovered |
Metrics collected |
Used for |
|---|---|---|---|
|
SNMP |
Controller host name, Controller hardware model, Controller network interfaces, Associated WLAN Access Points |
Controller Uptime, Controller Network Interface metrics (utilization, bytes sent and received, packets sent and received, errors, discards and queue lengths), Radio interface performance metrics |
Availability and Performance Monitoring |
|
SNMP Trap |
Controller device type |
All system logs: User authentication, Admin authentication, WLAN attacks, Wireless link health |
Availability, Security and Compliance |
Event Types
In ADMIN > Device Support > Event, search for "aruba" in the Description and Device Type columns to see the event types associated with this device.
Rules
There are no predefined rules for this device.
Reports
In RESOURCE > Reports , search for "aruba" in the Name column to see the reports associated with this device.
Configuration
SNMP V1/V2c
- Log in to your Aruba wireless controller with administrative privileges.
- Go to Configuration > Management > SNMP.
- For Read Community String, enter
public. - Select Enable Trap Generation.
- Next to Read Community String, click Add.
- Under Trap Receivers, click Add and enter the IP address of your FortiSIEM virtual appliance.
Sample Aruba Networks Wireless LAN Controller SNMP Trap Messages
2008-06-11 11:38:34 192.168.20.7 [192.168.20.7]:SNMPv2-MIB::sysUpTime.0 = Timeticks:
(1355400) 3:45:54.00 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-
SMI::enterprises.14823.2.2.1.1.100.1003 SNMPv2-SMI::enterprises.14823.2.3.1.11.1.1.60 =
Hex-STRING: 07 D8 06 0B 13 2E 39 00 2D 07 00 SNMPv2-
SMI::enterprises.14823.2.2.1.1.2.1.1.2.192.168.180.1 = Hex-STRING: 00 1E 52 72 AF 4B
Settings for Access Credentials
Set these Access Method Definition values to allow FortiSIEM to communicate with your device.
| Setting | Value |
|---|---|
| Name | <set name> |
| Device Type | Aruba ArubaOS WLAN AP |
| Access Protocol | See Access Credentials |
| Port | See Access Credentials |
| Password config | See Password Configuration |