Dell PowerConnect W-AirWave 7.4 | User Guide Using RAPIDS and Rogue Classification | 173switches feed wireless device information to AirWave, which AirWave then processes. AMP then pushes theWMS classification to all of the Dell PowerConnect W-Series controllers that are WMS offload enabled.WMS Offload ensures that a particular BSSID has the same classification on all of the controllers. WMS Offloadremoves some load from master controllers and feeds 'connected-to-lan' information to the RAPIDS classificationengine. RAPIDS classifications and controller classifications are separate and often are not synchronized.The following table compares how default classification may differ between AMP and ArubaOS for scenariosinvolving WMS Offload.For additional information about WMS Offload, refer to the Dell PowerConnect W-AirWave 7.4Best PracticesGuide in Home > Documentation.Device OUI ScoreThe Organizationally Unique Identifier (OUI) score is based on the LAN MAC address of a device. RAPIDS canbe configured to poll your routers and switches for the bridge forwarding tables. RAPIDS then takes the MACaddresses from those tables and runs them through a proprietary database to derive the OUI score. The OUI scoreof each device is viewable from each rogue’s detail page. Table 99 provides list the OUI scores definitions.Rogue Device Threat LevelThe threat level classification adds granularity for each general RAPIDS classification. Devices of the sameclassification can have differing threat scores based on the classifying rule, ranging from 1 to 10 with a defaultvalue of 5. This classification process can help identify the greater threat. Alerts can be defined and sorted bythreat level.Threat level and classification are both assigned to a device when a device matches a rule. Once classified, adevice’s classification and threat level change only if it is classified by a new rule or is manually changed. ThreatsNOTE: RAPIDS classification is not pushed to the devices.Table 98 Rogue Device Classification MatrixAirWave AOS (ARM)Unclassified (default state) UnknownRogue RogueSuspected Neighbor InterferingNeighbor Known InterferingValid ValidContained Rogue DOSTable 99 Device OUI ScoresScore DescriptionScore of 1 Indicates any device on the network; this is the lowest threat level on the network.Score of 2 Indicates any device in which the OUI belongs to a manufacturer that produces wireless (802.11) equipment.Score of 3 Indicates that the OUI matches a block that contains APs from vendors in the Enterprise and small office/ smallhome market.Score of 4 Indicates that the OUI matches a block that belonged to a manufacturer that produces small office/ small homeaccess points.
