Nortel Networks 2300 Switch User Manual


 
Rogue detection and counter measures 647
Nortel WLAN—Security Switch 2300 Series Configuration Guide
In this example, two BSSIDs are mapped to the SSID. Separate sets of information are shown for each of the BSSIDs,
and information about the listeners for each BSSID is shown.
The following command displays detailed information for a BSSID.
WSS# show rfdetect mobility-domain bssid 00:0b:0e:00:04:d1
BSSID: 00:0b:0e:00:04:d1 Vendor: Cisco SSID: notmycorp
Type: rogue Adhoc: no Crypto-types: clear
WSS-IPaddress: 10.8.121.102 Port/Radio/Ch: 3/2/56 Mac: 00:0b:0e:00:0a:6b
Device-type: rogue Adhoc: no Crypto-types: clear
RSSI: -72 SSID: notmycorp
WSS-IPaddress: 10.3.8.103 Port/Radio/Ch: ap 1/1/157 Mac: 00:0b:0e:76:56:82
Device-type: rogue Adhoc: no Crypto-types: clear
RSSI: -72 SSID: notmycorp
Displaying RF detect data
To display information about the APs detected by an individual WSS, use the following command:
show rfdetect data
You can enter this command on any switch in the Mobility Domain.
WSS# show rfdetect data
Total number of entries: 197
Flags: i = infrastructure, a = ad-hoc
c = CCMP, t = TKIP, 1 = 104-bit WEP, 4 = 40-bit WEP, w = WEP(non-WPA)
BSSID Vendor Type Port/Radio/Ch Flags RSSI Age SSID
----------------- ----------------- ----------------------- -------------------------
00:07:50:d5:cc:91 Cisco intfr 3/1/6 i----w -61 6 r27-cisco1200-2
00:07:50:d5:dc:78 Cisco intfr 3/1/6 i----w -82 6 r116-cisco1200-2
00:09:b7:7b:8a:54 Cisco intfr 3/1/2 i----- -57 6
00:0a:5e:4b:4a:c0 3Com intfr 3/1/11 i----- -57 6 public
00:0a:5e:4b:4a:c2 3Com intfr 3/1/11 i-t1-- -86 6 trapezewlan
00:0a:5e:4b:4a:c4 3Com intfr 3/1/11 ic---- -85 6 nrtl-ccmp
00:0a:5e:4b:4a:c6 3Com intfr 3/1/11 i-t--- -85 6 nrtl-tkip
00:0a:5e:4b:4a:c8 3Com intfr 3/1/11 i----w -83 6 nrtl-voip
00:0a:5e:4b:4a:ca 3Com intfr 3/1/11 i----- -85 6 nrtl-web-based aaa
Displaying the APs detected by an AP radio
To display the APs detected by an AP radio, use any of the following commands:
show rfdetect visible mac-addr
show rfdetect visible ap ap-num [radio {1 | 2}]
show rfdetect visible ap ap-num [radio {1 | 2}]
To following command displays information about the rogues detected by radio 1 on ap port 3: