Filter
Top Products
644 Rogue detection and counter measures
NN47250-500 (320657-F Version 02.01)
(For information about the fields in the output, see the Nortel WLAN Security Switch 2300 Series Command Line
Reference.)
Displaying rogue clients
To display the wireless clients detected by a WSS, use the following command:
show rfdetect clients [mac mac-addr]
The following command shows information about all wireless clients detected by a WSS’s APs:
WSS# show rfdetect clients
Total number of entries: 30
User Name Sess IP or MAC ID Address VLAN Name Port/Radio
----------------------- ------------------------------------- ----------------- ---------------
EXAMPLE 5* 192.168.12.100 vlan-eng 3/1
jose@example.com 5125* 192.168.12.141 vlan-eng 1/1
00:30:65:16:8d:69 4385* 192.168.19.199 vlan-wep 3/1
761 00:0b:be:15:46:56 (none) 1/2
763 00:02:2d:02:10:f5 (none) 1/1
Client MAC Client Vendor AP MAC Vendor AP Port/Radio/Channel NoL Type Last seen
--------------- ---------------- -------------------- ------------------------- -----------------------
00:03:7f:bf:16:70 Unknown Unknown ap 1/1/6 1 intfr 207
00:04:23:77:e6:e5 Intel Unknown ap 1/1/2 1 intfr 155
00:05:5d:79:ce:0f D-Link Unknown ap 1/1/149 1 intfr 87
00:05:5d:7e:96:a7 D-Link Unknown ap 1/1/149 1 intfr 117
00:05:5d:7e:96:ce D-Link Unknown ap 1/1/157 1 intfr 162
00:05:5d:84:d1:c5 D-Link Unknown ap 1/1/1 1 intfr 52
The following command displays more details about a specific client:
WSS# show rfdetect clients mac 00:0c:41:63:fd:6d
Client Mac Address: 00:0c:41:63:fd:6d, Vendor: Linksys
Port: ap 1, Radio: 1, Channel: 11, RSSI: -82, Rate: 2, Last Seen (secs ago): 84
Bssid: 00:0b:0e:01:02:00, Vendor: Nortel, Type: intfr, Dst: ff:ff:ff:ff:ff:ff
Last Rogue Status Check (secs ago): 3
The first line lists information for the client. The other lines list information about the most recent 802.11 packet
detected from the client.
show rfdetect attack-list Displays the list of wireless devices that you
want APs to attack with countermeasures. (See
“Configuring an attack list” (page 634).)
show rfdetect ignore Displays the BSSIDs of third-party devices that
WSS Software ignores during RF detection
scans. (See “Configuring an ignore list”
(page 635).)
Table 3.Rogue detection show commands (continued)
Command Description