Drawbacks of using 4 APs to contain a rogue AP

What are the benefits/drawbacks of using 4 controller-based APs to contain a rogue AP vs using just one. If I understand it correctly a single AP can never be set to contain more than 3 rogues, and will never use more than 30% of its resources to do so. Also, you can set a maximum of 4 APs on "containment duty" against one rogue. I also believe that containment involves sending spoofed messages to the wireless clients which requires your APs to be within range of all the rogue clients.
So.. what do you guys think? Let me know if my conclusions regarding the process are incorrect!
Thanks!

If you actually try this in the lab with a client set to do a continuous ping, you will see that containing with only one AP will still allow clients to connect. The plan here, as it was designed by Airespace, was to only contain radios that you KNOW are a threat. APs on your own wired network were detected by RF and then verified to be on the wired network with a protocol called RLDP. Once an AP was discovered via RLDP, the rogue was automatically contained by a 4 AP containment if 4 APs heard the rogue. An alert was then sent to the administrator and the rogue was mapped for location so that it could be collected. Containing APs that were neighboring was disuaded because of the FCC "Good Neighbor" policy. You needed to make sure the AP was an actual threat to the security of your network before taking action. This became Cisco's policy on all rogue devices and they disabled RLDP from the system. Now if you do a contain you see the Legal Disclaimer that Cisco has put into place. A 4 AP containment will use some resources of your APs but it should not be a long term fix. You should go and deal with the rogue device personally once it is contained and mapped. After dealing with it, set the appropriate rogue state and remove containment.

Similar Messages

APs being contained as rogues by an external system

A rogue containment policy is being initiated against my organization's APs and I do not have the tools/knowledge necessary to track down its point of origin. What tools or steps are required to identify who is containing an AP?
Thanks

I currently have this weird issue too
I have no idea why. It started yesterday and continued today. I know that some people are in that area playing around with some Zigbee RFID tags, but I don't think that should make a problem?
Here from the controller logfile:
wism-1250-2: *Apr 09 14:40:03.582: %LWAPP-1-AP_CONTAINED: spam_lrad.c:25558 AP 1200b-6106-1 is being contained on slot 0
Containment is after around 1 minute over (WCS sends two mails, one with containment and one with CLEAR). I don't know if the users have some issues because of this, so far only one complained, but that could also be because he's using an Apple and not a stadard client.
The controller logfile doesn't show a "resolve" of the containment.
Auto containment of rogues is disabled on the controller.
Any ideas? Or did you ever receive an answer from your tac case?
Thanks,
Patrick

Issue containing a rogue AP

My WLC has detected (via 15 detecting radios) a rogue AP with a client connected to it. The infrastructure has not determined that the AP is plugged into the local network. I'm trying to contain the AP - I classify it as "Malicious", update its status to "Contain" & assign 2 APs (though the number of APs don't matter here) to contain the rogue.
Everything looks right, as the WLC shows that the rogue AP is in a "Contained" status. However, after about a minute the WLC shows the rogue having been reverted to an "Alert" status. I've contain other rogues before but have yet to see one not have the "Contained" status stick.
Anyone seen this? Or know why it's happening? Thanks!

Check and verify that the "rogue" is not one of your APs associated to a controller with a different mobility group name but on the same network as your primary mobility group. This is the only way I could think that this is happeneing. Also, try a 4 AP containment. At 2 APs a client could still associate to the rogue thus generating a new alert.

How to use embeddable EJB container (Java EE 6 / EJB 3.1) on Mac OS?

To my understanding, the intent of the embeddable EJB 3.1 container is - among others - to support out-of-container testing. I've created a JUnit test case that uses glassfish embeddable for integration testing of ejb 3.1 Light ejbs. I run the tests using Maven.
I have one general problem and one problem specific to Mac OS (I'm not able to use the embeddable container at all on Mac OS).
1. First the general problem: the ejb container does not inject or publish classes that are on the test class-path only:
src>main>java>MyEjb.class
src>test>java>MyTestEjb.class
The test case looks like this:
public class TestCase1b {
     static EJBContainer container;
     @BeforeClass
     public static void initEjbContainer() {
          container = EJBContainer.createEJBContainer();
          for ( Object property : System.getProperties().keySet() ) {
          System.out.print(property + " : ");
          System.out.println(System.getProperty((String)property));
     @Test
     public void canTestWithTransaction() throws NamingException, NotSupportedException, SystemException {
          Context ctx = container.getContext();
          OrderServiceTesterEjb orderServiceTester = (OrderServiceTesterEjb) ctx
                    .lookup("java:global/classes/OrderServiceTesterEjb");
          Assert.assertNotNull(orderServiceTester.testCreateOrderWithTransaction());
     @AfterClass
     public static void closeEjbContainer() {
          container.close();
The idea with a test-ejb is to mimic the way I typically perform junit integration testing with Spring: the test database i preloaded with test data. Each test-method of the junit test case starts a transaction, invokes the service, evaluates the state of the database and finally performs a rollback. My idea was to mimic that by creating a test ejb (Stateless, REQUIRES_NEW), that injects the EJB to test, calls the method to test, evaluates the result or db state and finally sets rollbackonly before returning. The problem is that the test case can lookup ejbs in src/main/java, but not the "test" ejbs in src/test/java. My workaround is to include the test-EJBs in src/main/java which I think is not acceptable.
2. Next the Mac-problem:
The Mac OS JDK 1.6 contains version 1.0 of javax.annotation (jsr 250). EJBs developed with Java EE 6 depends on version 1.1 of javax.annotation. Specifically, one typically need @Resource(lookup=... and @DataSourceDefinition of javax.annotation.sql which are both missing in the JDK. I can compile my EJBs by adding the javaee-api-6.0.jar library to my classpath. But when running unit tests with maven (as described above), a runtime error is reported, stating that the lookup-property of the @Resource annotation is undefined. This is logical, since the boot classpath should have precedence. So I added javaee-api-6.0.jar to the lib/endorsed directory of the jre. Unfortunetely, this triggers a segmentation fault of the Mac OS JVM when running the test. I have no other workaround than switching to windows. Any help / hints are much appreciated.
/Johan

Just as an update, we're soon to release the WLS 11g R1 PS2 update, which will contain WLS 10.3.3 just to confuse things.
As part of that, we're distributing for the first time, an additional .zip version of WLS to make it easier for developers.
The zip file distribution has no GUI installer -- it's a simple case of unzip, run a script it provides, then start the server.
The zip file distribution has been specifically tested on Mac OS X and the WLS config/domain scripts automatically adjust as necessary for the Mac OS X java environment.
Once the zip file distribution is available, we hope that developing against WLS on Mac OS X (and Windows/Linux) will be an easier task.
-steve-

GroupLayout can only be used with one Container at a time

Dear all,
I am a beginner so please don't throw rocks at me...
I have created two frames with NetBeans. One is the main frame (extends from JPanel) and the other frame I put it to be started when pressing a button from the main frame (the second frame extends from JFrame). Both frames are created using the designer in NetBeans, so the code for creating the GUI is automatically generated by NetBeans, so both frames use the same layout (GroupLayout).
Here is the code of the button from the main frame to start the second one:
private void manageCustomersActionPerformed(java.awt.event.ActionEvent evt) {
        // TODO add your handling code here:
        CustomerGUI custGUI1=new CustomerGUI();//CustomerGUI is the second frame
        custGUI1.setVisible(true);
}When I press this button from the main frame I get this runtime exception: Exception in thread "AWT-EventQueue-0" java.lang.IllegalArgumentException: GroupLayout can only be used with one Container at a time. The second frame is not opened.
How should I handle this?
What I want to do: I want to have a main frame, from which I can start additional ones (the main frame must be always opened, while the additional ones can be closed after performing certain actions). I read a little about internal frames and I think this can be a solution, but I must edit the existing design...
Thank you
With respect,
Don
Edited by: don1983p on Dec 16, 2008 2:21 AM

AndrewThompson64 wrote:
There are those that maintain that JFrame should never be extended. I am not convinced, but most cases where a JFrame is extended would be better coded as simply configuring the JFrame within the main(). GUI builders such as found in NetBeans seem to extend JFrame as a matter of course.I too am not rigorous or religious about this either, but try to adhere to this as a matter of practicality and convenience, I find that if I don't extend a JComponent but rather use composition rather than inheritance, it's much easier to use objects of my class when programming in Eclipse. For instance in Eclipse (and in most IDEs), if I type my object name and then a period, it will show all of the method's available for me to use on this object. If I subclass JPanel or JFrame, I'll see a gazillion methods most I don't want to see, and thus most are clutter. On the other hand if I use composition, I'll only see a small number of methods and these will be only the methods that I want to see and need to use.

Error while integrating OBIEE report with EBS using Rich Content Container

I am trying to integrate OBIEE report with EBS using Rich Content Container OAF functionality. I have followed the steps mentioned in oracle Note - Embedding Analytics in Oracle E-Business Suite [ID 974422.1]. When i run my page, the container region comes up with the error message - The requested URL /pls/ghrfpkd2/OracleSSWA.Execute was not found on this server. Can someone please help me with some documents on the steps to integrate OBIEE with EBS using Rich Content Container.

I'm getting the same error on WebSphere 6.1.5. Is there any solution for this?

Error: The Java Runtime in use does not contain a suitable JAXP feature

Hi,
I'm trying to get Eclipse TPTP to work. One of the steps I need to execute is to run a setConfig.bat file. When I ran it, I got the following error:
ERROR: The Java Runtime in use does not contain a suitable JAXP feature
RESOLUTION: Use a JRE which supports the JAXP featureI use Eclipse Europa, and it is using my JDK (actually JRE) 1.6.0_05. That should mean I have JAXP in my JRE (which is confirmed when I search on JAXP from the directory C:\Program Files\Java containing jdk1.6.5_05 and jre1.6.5_05 directories).
Is there something extra I need to do to let Eclipse and TPTP find my JAXP classes?
TIA,
Abel

Hi,
Even i am getting the same error but i use JRE 1.5.0_14. please let me know if you happen to resolve this.
Thanks in Advance,
Sai

How do you use the "Item Containing Start/End Date" in a Calendar?

Hi
I want to do a calendar where the days shown will be conditional to a certain interval. Now I though I could achieve that using the Item Containing Start Date of a calendar. But it doesn't seem to work. In the help it says :
Enter an item in the application which holds the start date of the calendar. The format of the date in this item must be YYYYMMDD.
This is what I did here
http://apex.oracle.com/pls/otn/f?p=34530:1::::::
I have 3 fields. 2 for the Start Date and End Date and 1 for the "Date Item" parameter. Only the latter has an effect on the calendar display, the calendar only displays the month of the "Date Item" (in monthly mode).
Wether or not I check "Begin at Start of Interval", it doesn't affect the way those fields are affecting the Calendar.
So, how do we use that "Item Containing Start/End Date" parameter?

Hello,
does yout Script work when you begin with ?:
Start-Process powershell -Verb runAs
Best regards,
Stefan
German Orchestrator Portal ,
My blog in English

This domain name can't be used because it contains a protected word or inappropriate language.

Dear
Creating a Microsoft services experience for my domain (fazlic.ba), is showing an error message as below:
"This domain name can't be used because it contains a protected word or inappropriate language. Please contact support if you feel this is not the case."
Can somone help in resolving this issue as i need this bit urgent and i am trying for same since last 2 days but with no success
My domain name is fazlic.ba, which needs to be added as custom domain in domain.live.com
Thanks

Hi,
we cannot provide any solution here because the domain validation is the second step of the process and is automated.
My advice wouldbe to follow the message guideline and contact the support, they may identify why this domain is refused.
Hope this helps,
Fabrice DI GIULIO, http://blog.digiulio.fr
Technical Solutions Professional, EMEA at AvePoint

This domain name can't be used because it contains a protected word or inappropriate language. Please contact support if you feel this is not the case.

we are unable to domain smippl.com it gives error
This domain name can't be used because it contains a protected word or inappropriate language. Please contact support if you feel this is not the case.
It is a real estate company :
SARLA MADAN INFRASTRUCTURE PROJECTS PRIVATE LIMITED
    Address : "SWAYANG TOWER" (STILT FLOOR),
    Plot No. M-73, Madhusudan Nagar, Unit-IV, Bhubaneswar-751001, Odisha,
    India
current email : [email protected]
Domain to setup email in Windows Live outlook express - smippl.com
waiting for solution

Hi,
I wonder if you are registering domain name here:
https://domains.live.com/Signup/SignupDomain.aspx?dn=&ss=0&ctkn=&et=0
If so contact with windows live support:
https://support.live.com/default.aspx?scrx=1
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Using databases and container events?

I'm having trouble finding documents show how one should use databases and listen for container events? I'm using Berkley Java DB. I'll need all my remote object to have access to the database. How do I pass that in? Custom adapters? Also, when Tomcat shuts down I need to close the database, how would this be down? Custom adapters? So I may be answering my own question, but I'm asking cause I really don't see anything in the documentation that points this out. It really looks like I'd be using singletons and factories for this. I could register a Servlet or Servlet Context to listen for Tomcat events, but I figured it couldn't hurt to ask others using Blaze, as I'm very new to it. Thanks.

So how would you tell Blaze to use this? Is there something you put into the config file? My thoughts on all this is to use PicoContainer to manage all services then create an adapter to inject all resources when creating remote objects. But this seems a little heavy if Blaze can do all this for me. The adapter seems like the injection point to me. Is that not what it's used for? Or is using it like that bad practice under Blaze? I've read all I can find on Blaze, so either it's missing docs, or I'm not finding them all. If I'm missing them, by all means let me know where to go. I don't want to ask questions that are already answered in documents else where.
On Tue, May 20, 2008 at 10:51 AM, Mete Atamel <
[email protected]> wrote:
A new message was posted by Mete Atamel in
General Discussion --
 Using databases and container events?
I think it's mainly in JavaDocs but here's a sample I have where I check to make sure the HSQLDB is running as the BlazeDS starts up:
import java.sql.Connection;
import java.sql.SQLException;
import flex.messaging.config.ConfigMap;
import flex.messaging.services.AbstractBootstrapService;
public class DatabaseCheckService extends AbstractBootstrapService
 // This is called right before server starts up.
 public void initialize(String id, ConfigMap properties)
 Connection c = null;
 try
 // Check that the database is running...
 c = ConnectionHelper.getConnection();
 // ... if yes return
 return;
 catch (SQLException e)
 System.out.println("DB is not running!");
 finally
 ConnectionHelper.close(c);
// This is called as server is starting.
 public void start()
 // No-op
// This is called as server is stopping.
 public void stop()
 // No-op
View/reply at
Using databases and container events?
Replies by email are OK.
Use the
unsubscribe form to cancel your email subscription.
"All that is necessary for the triumph of evil is that good men do nothing." - Edmund Burke

What is the exact use of Sequence container

Hi all,
I am intermediate in SSIS package,i am not understanding what is the exact use of Sequence container ?
I am preparing for interview(3 years exp), if experts dont mind can you pls share some tips and questions to clear the interview ?
pls
thanks

Hi SelvakumarSubramaniam,
This blog delivers a good summary of the benefits we can get by using Sequence Container:
Easier debugging by allowing you to disable groups of tasks to focus package debugging on one subset of the package control flow.
Managing multiple tasks in one location by setting properties on a Sequence Container instead of setting properties on the individual tasks.
Provides scope for variables that a group of related tasks and containers use.
Create a transaction around all the components inside the container.
Here are some other good resources:
http://www.phpring.com/sequence-container-in-ssis/
http://sql-developers.blogspot.com/2010/06/sequence-container-in-ssis.html
Regards,
Mike Yin
TechNet Community Support

Freeze header row using over overflow container

hi All,
I have an issue with my header in the gridlayout element, we are using the overflowcontainer element.
When there is a scroll bar and user scrolls, the header also scrolls, we want to just scroll the line items and the header should be frozen,
any suggestion please ?

Hi Friend,
You can achieve your requirement by using xhtmlb overflow container.Check the below link.
[link|Freeze header in BSP page which is using Grid Layout]
With Regards,
SHARMILA BRINDHA.M

Create another object using the same container generated by a split...

Hi SapGears!
I'm facing a problem about creating an object using a splited container.
I split the container A in containers A1 and A2 and create alv in A1 and html in A1.
After that, i need to create a toolbar buttons using the class cl_gui_toolbar in A2 without need to recreate all again.
I Try to call method free( ) and recreate the object, but the container A2 appears in blank.
any help will be very nice!!!

I would try different solution. Split A2 into two new rows B1 and B2. In B1 set your toolbar, in B2 your alv. By default set B1 cell hidden
"suppress splitter bar
CALL METHOD gr_splitter_cont->set_row_sash
    EXPORTING
      id    = 1
      type = gr_splitter_cont->type_movable
      value = gr_splitter_cont->false.
"show only alv in entire cell
CALL METHOD gr_splitter_cont->set_row_height( id = 1 height = 1000 ).
Now when you request for toolbar display only that cell
    CALL METHOD gr_splitter_cont->set_row_height( id = 1 height = 0 ).
A kind of workaround but you will avoid much troubles.
Regards
Marcin

Destroy ALV which is using Screen as container

What I did:
*In the PBO of screen 200
*Created a l_alv of type alv grid which is using screen as container
 CREATE OBJECT l_alv EXPORTING i_parent = cl_gui_container=>screen0.
*filling it with data
*--Transfer data to ALV
CALL METHOD l_alv->set_table_for_first_display
Expor . . .
When user is pressing F3 on screen 200, i m going back to sel-screen
leave to screen 1000
or
call selection-screen 1000
Problem Statement:
Though I am landing up to screen 1000 as i can see the menu of sel screen, but my ALV is still visible on top of screen 1000
What I did:
to destroy it, i m using these lines before Call selection-screen 1000
call method cl_gui_container=>screen0->free.
call method l_alv->free.

* Internal Tables:
DATA: i_exclude TYPE ui_functions, " Function button table definitions
 i_fieldcat TYPE lvc_t_fcat, " Field catalogue
 i_output TYPE STANDARD TABLE OF ZLIGHT_STRUC,
 i_groups TYPE lvc_t_sgrp,
* Work Areas:
 w_variant TYPE disvariant, " Enable variant saving
 w_layout TYPE lvc_s_layo, " Define the layout structure
 w_output TYPE MARA.
* Constants Declaration
CONSTANTS: c_a TYPE c VALUE 'A'. "All Layouts
* Object Declarations
DATA : o_alvgrid TYPE REF TO cl_gui_alv_grid,
 o_dockingcontainer TYPE REF TO cl_gui_docking_container.
In PBO,
FORM f9000_objects_create.
* Check to see if we are runnng on online
IF cl_gui_alv_grid=>offline( ) IS INITIAL.
 CREATE OBJECT o_dockingcontainer
 EXPORTING
 ratio = '95'
 EXCEPTIONS
 cntl_error = 1
 cntl_system_error = 2
 create_error = 3
 lifetime_error = 4
 lifetime_dynpro_dynpro_link = 5
 others = 6.
 IF sy-subrc NE 0.
* MESSAGE i001 WITH text-e01.
 LEAVE LIST-PROCESSING.
 ENDIF.
ENDIF.
CREATE OBJECT o_alvgrid
 EXPORTING
 i_parent = o_dockingcontainer.
ENDFORM. " f9000_objects_create
FORM f9200_build_field_cat TABLES p_fieldcat STRUCTURE lvc_s_fcat
 USING value(p_structure).
CALL FUNCTION 'LVC_FIELDCATALOG_MERGE'
 EXPORTING
 i_structure_name = p_structure
 CHANGING
 ct_fieldcat = p_fieldcat[]
 EXCEPTIONS
 inconsistent_interface = 1
 program_error = 2
 OTHERS = 3.
IF sy-subrc <> 0.
* MESSAGE i277.
 LEAVE LIST-PROCESSING.
ENDIF.
ENDFORM. " f9200_build_field_cat
FORM f9400_layout USING value(ptitle)
 value(pzebra)
 value(pmode)
 value(pwidth)
 value(pvariant).
w_layout-grid_title = ptitle.
w_layout-zebra = pzebra.
w_layout-sel_mode = pmode.
w_layout-cwidth_opt = pwidth.
w_variant-handle = pvariant.
w_variant-report = sy-repid.
ENDFORM. " f9400_layout
FORM f9500_display_data TABLES p_output
 p_groups
 p_exclude
 p_fieldcat
 USING value(p_layout).
CALL METHOD o_alvgrid->set_table_for_first_display
 EXPORTING
 is_variant = w_variant
 i_save = c_a
 is_layout = p_layout
 it_special_groups = p_groups[]
 it_toolbar_excluding = p_exclude[]
 CHANGING
 it_outtab = p_output[]
 it_fieldcatalog = p_fieldcat[]
 EXCEPTIONS
 invalid_parameter_combination = 1
 program_error = 2
 too_many_lines = 3
 OTHERS = 4.
IF sy-subrc <> 0.
* MESSAGE i278.
 LEAVE LIST-PROCESSING.
ENDIF.
ENDFORM. " f9500_display_data
FORM f9600_free_objects USING pobject
 value(ptype)
 value(ptext).
DATA: l_objectalv TYPE REF TO cl_gui_alv_grid.
* Need to type the field symbol or it does not work
CASE ptype.
 WHEN 'ALV'.
 l_objectalv = pobject.
 IF NOT ( l_objectalv IS INITIAL ).
 CALL METHOD l_objectalv->free
 EXCEPTIONS
 cntl_error = 1
 cntl_system_error = 2
 OTHERS = 3.
 CLEAR: pobject, l_objectalv.
 PERFORM f9700_error_handle USING ptext.
 ENDIF.
 WHEN 'DOCKING'.
 DATA: lobjectdock TYPE REF TO cl_gui_docking_container.
 lobjectdock = pobject.
 IF NOT ( lobjectdock IS INITIAL ).
 CALL METHOD lobjectdock->free
 EXCEPTIONS
 cntl_error = 1
 cntl_system_error = 2
 OTHERS = 3.
 CLEAR: pobject, lobjectdock.
 PERFORM f9700_error_handle USING ptext.
 ENDIF.
 WHEN 'CONTAINER'.
 DATA: lobjectcontainer TYPE REF TO cl_gui_container.
 lobjectcontainer = pobject.
 IF NOT ( lobjectcontainer IS INITIAL ).
 CALL METHOD lobjectcontainer->free
 EXCEPTIONS
 cntl_error = 1
 cntl_system_error = 2
 OTHERS = 3.
 CLEAR: pobject, lobjectcontainer.
 PERFORM f9700_error_handle USING ptext.
 ENDIF.
 WHEN OTHERS.
 sy-subrc = 1.
 PERFORM f9700_error_handle USING
 text-e04.
ENDCASE.
ENDFORM. " f9600_free_objects
*& Form f9700_error_handle
* This form is used to handle errors
* -->P_PTEXT - Text holding the messsage to be displayed as
* information
FORM f9700_error_handle USING value(ptext).
IF sy-subrc NE 0.
* Add your handling, for example
 CALL FUNCTION 'POPUP_TO_INFORM'
 EXPORTING
 titel = text-e03
 txt2 = sy-subrc
 txt1 = ptext.
ENDIF.
ENDFORM. " f9700_error_handle
MODULE status_9001 OUTPUT.
IF o_dockingcontainer IS INITIAL.
 SET PF-STATUS 'ZSTATUS'.
 SET TITLEBAR 'ZTITLE'.
*Create Objects
 PERFORM f9000_objects_create.
*Build field catalog
 PERFORM f9200_build_field_cat TABLES i_fieldcat
 USING 'MARA.
*Layout
 PERFORM f9400_layout USING sy-title 'X' 'X' 'X' p_layout.
*Display data
 PERFORM f9500_display_data TABLES i_output
 i_groups
 i_exclude
 i_fieldcat
 USING w_layout.
ENDIF.
ENDMODULE. " STATUS_9001 OUTPUT
*& Module USER_COMMAND_9001 INPUT
* This is used for PAI details
MODULE user_command_9001 INPUT.
CASE sy-ucomm.
 WHEN 'EXIT' OR 'CANC'.
 PERFORM f9600_free_objects:
 USING o_alvgrid 'ALV' text-e02,
 USING o_dockingcontainer 'DOCKING'
 text-e01.
 LEAVE PROGRAM.
 WHEN 'BACK'.
 PERFORM f9600_free_objects:
 USING o_alvgrid 'ALV' text-e02,
 USING o_dockingcontainer 'DOCKING'
 text-e01.
 SET SCREEN '0'.
 LEAVE SCREEN.
 WHEN OTHERS.
ENDCASE.
ENDMODULE. " USER_COMMAND_9001 INPUT
Hope this helps u.

Drawbacks of using 4 APs to contain a rogue AP

Similar Messages

Maybe you are looking for