Tracking of Randomized MAC Addresses

This feature enables the tracking of probe requests from clients using randomized MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. addresses, offering deeper insights into client presence within the network infrastructure. This is important for users seeking advanced analytics in environments where understanding visitor behavior and network usage patterns is essential.

The system counts the number of detected randomized MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. addresses and groups them into 4 different predetermined levels which enhance the ability to analyze client presence:

RSSI Received Signal Strength Indicator. RSSI is a mechanism by which RF energy is measured by the circuitry on a wireless NIC (0-255). The RSSI is not standard across vendors. Each vendor determines its own RSSI scale/values. level

Interval value

Excellent

More than -50 dBm Decibel-Milliwatts. dBm is a logarithmic measurement (integer) that is typically used in place of mW to represent receive-power level. AMP normalizes all signals to dBm, so that it is easy to evaluate performance between various vendors.

Good

-51 to -60 dBm Decibel-Milliwatts. dBm is a logarithmic measurement (integer) that is typically used in place of mW to represent receive-power level. AMP normalizes all signals to dBm, so that it is easy to evaluate performance between various vendors.

Fair

-61 to -70 dBm Decibel-Milliwatts. dBm is a logarithmic measurement (integer) that is typically used in place of mW to represent receive-power level. AMP normalizes all signals to dBm, so that it is easy to evaluate performance between various vendors.

Poor

-71 and less dBm Decibel-Milliwatts. dBm is a logarithmic measurement (integer) that is typically used in place of mW to represent receive-power level. AMP normalizes all signals to dBm, so that it is easy to evaluate performance between various vendors.

The default observation window for these counters is set to 60 seconds, but is configurable through CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. to suit different environmental needs.

Administration and Configuration

This option is disabled by default, but it can be enabled through the sub commands added under ids general-profile command, laa-counter-msg and laa-counter-msg-interval. Counters are sent to ALE Analytics and Location Engine. ALE gives visibility into everything the wireless network knows. This enables customers and partners to gain a wealth of information about the people on their premises. This can be very important for many different verticals and use cases. ALE includes a location engine that calculates associated and unassociated device location periodically using context streams, including RSSI readings, from WLAN controllers or Instant clusters. using the profile default-ale command.

The following example display on how the feature is enabled:

(Aruba7010_15_40_FC) [mynode] #show ids general-profile default

IDS Intrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. General Profile "default"

-----------------------------

Parameter Value

--------- -----

LAA counters Message Interval 60 sec

LAA counters Message true

This example displays how profile default-ale is configured: 

(Aruba7010_15_40_FC) [mynode] #show mgmt-server profile default-ale

Mgmt Config profile "default-ale" (Predefined (changed))

--------------------------------------------------------

Parameter Value

--------------

Location Enabled

Users can check  counters directly from the AP by running the show ap monitor laa-counter ap-name <ap-name>:

(Aruba7010_15_40_FC) [mynode] #show ap monitor laa-counters ap-name ap505

LAA Counters

------------

RSSI Received Signal Strength Indicator. RSSI is a mechanism by which RF energy is measured by the circuitry on a wireless NIC (0-255). The RSSI is not standard across vendors. Each vendor determines its own RSSI scale/values. Value Recent Probe Reqs Count

---------- -----------------------

Excellent 385

Good 370

Fair 280

Poor 232

LAA counters sent: 20

Current time: 2023-07-31 08:38:4