Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

External Systems Configuration Guide

Aruba Networks Wireless LAN

What is Discovered and Monitored

FortiSIEM uses SNMP and NMAP to discover the device and to collect logs and performance metrics. FortiSIEM communicates to the WLAN Controller only and discovers all information from the Controller. FortiSIEM does not communicate to the WLAN Access points directly.

Protocol

Information Discovered

Metrics collected

Used for

SNMP

Controller host name, Controller hardware model, Controller network interfaces, Associated WLAN Access Points

Controller Uptime, Controller Network Interface metrics (utilization, bytes sent and received, packets sent and received, errors, discards and queue lengths), Radio interface performance metrics

Availability and Performance Monitoring

SNMP Trap

Controller device type

All system logs: User authentication, Admin authentication, WLAN attacks, Wireless link health

Availability, Security and Compliance

Event Types

In ADMIN > Device Support > Event Types, search for "aruba" to see the event types associated with this device. 

Rules

There are no predefined rules for this device. 

Reports

In RESOURCES > Reports, search for "aruba" in the main content panel Search... field to see the reports associated with this device. 

Configuration

SNMP V1/V2c
  1. Log in to your Aruba wireless controller with administrative privileges.
  2. Go to Configuration > Management > SNMP
  3. For Read Community String, enter public
  4. Select Enable Trap Generation
  5. Next to Read Community String, click Add.
  6. Under Trap Receivers, click Add and enter the IP address of your FortiSIEM virtual appliance.
Sample Aruba Networks Wireless LAN Controller SNMP Trap Messages

2008-06-11 11:38:34 192.168.20.7 [192.168.20.7]:SNMPv2-MIB::sysUpTime.0 = Timeticks:

(1355400) 3:45:54.00 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-

SMI::enterprises.14823.2.2.1.1.100.1003 SNMPv2-SMI::enterprises.14823.2.3.1.11.1.1.60 =

Hex-STRING: 07 D8 06 0B 13 2E 39 00 2D 07 00 SNMPv2-

SMI::enterprises.14823.2.2.1.1.2.1.1.2.192.168.180.1 = Hex-STRING: 00 1E 52 72 AF 4B

Settings for Access Credentials

Set these Access Method Definition values to allow FortiSIEM to communicate with your device.

Setting Value
Name <set name>
Device Type Aruba ArubaOS WLAN AP
Access Protocol See Access Credentials
Port See Access Credentials
Password config See Password Configuration

Aruba Networks Wireless LAN

What is Discovered and Monitored

FortiSIEM uses SNMP and NMAP to discover the device and to collect logs and performance metrics. FortiSIEM communicates to the WLAN Controller only and discovers all information from the Controller. FortiSIEM does not communicate to the WLAN Access points directly.

Protocol

Information Discovered

Metrics collected

Used for

SNMP

Controller host name, Controller hardware model, Controller network interfaces, Associated WLAN Access Points

Controller Uptime, Controller Network Interface metrics (utilization, bytes sent and received, packets sent and received, errors, discards and queue lengths), Radio interface performance metrics

Availability and Performance Monitoring

SNMP Trap

Controller device type

All system logs: User authentication, Admin authentication, WLAN attacks, Wireless link health

Availability, Security and Compliance

Event Types

In ADMIN > Device Support > Event Types, search for "aruba" to see the event types associated with this device. 

Rules

There are no predefined rules for this device. 

Reports

In RESOURCES > Reports, search for "aruba" in the main content panel Search... field to see the reports associated with this device. 

Configuration

SNMP V1/V2c
  1. Log in to your Aruba wireless controller with administrative privileges.
  2. Go to Configuration > Management > SNMP
  3. For Read Community String, enter public
  4. Select Enable Trap Generation
  5. Next to Read Community String, click Add.
  6. Under Trap Receivers, click Add and enter the IP address of your FortiSIEM virtual appliance.
Sample Aruba Networks Wireless LAN Controller SNMP Trap Messages

2008-06-11 11:38:34 192.168.20.7 [192.168.20.7]:SNMPv2-MIB::sysUpTime.0 = Timeticks:

(1355400) 3:45:54.00 SNMPv2-MIB::snmpTrapOID.0 = OID: SNMPv2-

SMI::enterprises.14823.2.2.1.1.100.1003 SNMPv2-SMI::enterprises.14823.2.3.1.11.1.1.60 =

Hex-STRING: 07 D8 06 0B 13 2E 39 00 2D 07 00 SNMPv2-

SMI::enterprises.14823.2.2.1.1.2.1.1.2.192.168.180.1 = Hex-STRING: 00 1E 52 72 AF 4B

Settings for Access Credentials

Set these Access Method Definition values to allow FortiSIEM to communicate with your device.

Setting Value
Name <set name>
Device Type Aruba ArubaOS WLAN AP
Access Protocol See Access Credentials
Port See Access Credentials
Password config See Password Configuration