Filter
Top Products
580 CHAPTER 26: ROGUE DETECTION AND COUNTERMEASURES
The following command displays an ignore list containing two BSSIDs:
WX4400# display rfdetect ignore
Total number of entries: 2
Ignore MAC
-----------------
aa:bb:cc:11:22:33
aa:bb:cc:44:55:66
Enabling
Countermeasures
Countermeasures are disabled by default. You can enable them on an
individual radio profile basis. To enable countermeasures on a radio
profile, use the following command:
set radio-profile name countermeasures {all | rogue |
configured | none}
The all option enables or disables countermeasures for rogues and for
interfering devices. This option is equivalent to the scope of rogue
detection in MSS Version 3.x. The rogue option enables or disables
countermeasures for rogues only.
The configured option causes radios to attack only devices specified in
the attack list on the WX switch (on-demand countermeasures). When
this option is used, devices found to be rogues by other means, such as
policy violations or by determining that the device is providing
connectivity to the wired network, are not attacked.
The none option disables countermeasures for this radio profile.
The following command enables countermeasures in radio profile
radprof3 for rogues only:
WX4400# set radio-profile radprof3 countermeasures rogue
success: change accepted.
The following command causes radios managed by radio profile radprof3
to issue countermeasures against devices in the WX switch’s attack list:
WX4400# set radio-profile radprof3 countermeasures configured
success: change accepted.
To disable countermeasures on a radio profile, use the following
command:
clear radio-profile name countermeasures