Nortel Networks NN47250-500 Switch User Manual


 
Rogue detection and counter measures 727
Nortel WLAN—Security Switch 2300 Series Configuration Guide
Fake AP SSID (when
source MAC address is
known)
FakeAP SSID attack detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
Fake AP SSID (when
source MAC address is
not known)
FakeAP BSSID attack detected.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
Spoofed SSID AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is masquerading our ssid used by
aa:bb:cc:dd:ee:fd.
Detected by listener aa:bb:cc:dd:ee:fc(port 2, radio 1), channel 11 with
RSSI -53.
Wireless bridge
detected
Wireless bridge detected with address aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
Netstumbler detected Netstumbler detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
Wellenreiter detected Wellenreiter detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
Ad-hoc client frame
detected
Adhoc client frame detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
Spoofed AP AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is being spoofed. Received
fingerprint 1122343 does not match our fingerprint 123344.
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with
RSSI -53.
Disallowed SSID
detected
AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of ssid-list.
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with
RSSI -53.
AP from disallowed
vendor detected
AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of vendor-list.
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with
RSSI -53.
Client from disallowed
vendor detected
Client Mac aa:bb:cc:dd:ee:ff is not part of vendor-list. Detected by
listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with RSSI -53.
Interfering client seen
on wired network
Client Mac aa:bb:cc:dd:ee:ff is seen on the wired network by WSS
10.1.1.1 on port 3 vlan 2 tag 1. Detected by listener
aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with RSSI -53.
Table 43.IDS and DoS log messages (continued)
Message Type Example Log Message