Nortel Networks 2300 Switch User Manual


 
Rogue detection and counter measures 633
Nortel WLAN—Security Switch 2300 Series Configuration Guide
indicates that the device is using an allowed SSID. However, to cause WSS Software to stop classifying the device as a
rogue, you must add the device’s MAC address to the ignore list.
To add an SSID to the list, use the following command:
set rfdetect ssid-list ssid-name
The following command adds SSID mycorp to the list of permitted SSIDs:
WSS# set rfdetect ssid-list mycorp
success: ssid mycorp is now in ssid-list.
To display the permitted SSID list, use the following command:
show rfdetect ssid-list
The following example shows the permitted SSID list on WSS:
WSS# show rfdetect ssid-list
Total number of entries: 3
SSID
-----------------
mycorp
corporate
guest
To remove an SSID from the permitted SSID list, use the following command:
clear rfdetect ssid-list ssid-name
The following command clears SSID mycorp from the permitted SSID list:
WSS# clear rfdetect ssid-list mycorp
success: mycorp is no longer in ssid-list.
Configuring a client black list
The client black list specifies clients that are not allowed on the network. WSS Software drops all packets from the
clients on the black list.
By default, the client black list is empty. In addition to manually configured entries, the list can contain entries added by
WSS Software. WSS Software can place a client in the black list due to an association, reassociation or disassociation
flood from the client.
The client black list applies only to the WSS on which the list is configured. WSSs do not share client black lists.
To add an entry to the list, use the following command:
set rfdetect black-list mac-addr
The following command adds client MAC address 11:22:33:44:55:66 to the black list:
WSS# set rfdetect black-list 11:22:33:44:55:66
success: MAC 11:22:33:44:55:66 is now blacklisted.