3Com 3CRWX120695A, Configuration Manual

Page: 590 / 728

590 C
HAPTER
26: R
OGUE
D
ETECTION AND
C
OUNTERMEASURES
Displaying RF
Detection
Information
You can use the CLI commands listed in Table 50 to display rogue
detection information.
Spoofed AP AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is being spoofed.
Received fingerprint 1122343 does not match our
fingerprint 123344.
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1),
channel 11 with RSSI -53.
Disallowed SSID
detected AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of
ssid-list.
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1),
channel 11 with RSSI -53.
AP from disallowed
vendor detected AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of
vendor-list.
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1),
channel 11 with RSSI -53.
Client from
disallowed vendor
detected Client Mac aa:bb:cc:dd:ee:ff is not part of vendor-list.
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1),
channel 11 with RSSI -53.
Interfering client seen
on wired network Client Mac aa:bb:cc:dd:ee:ff is seen on the wired network
by WX 10.1.1.1 on port 3 vlan 2 tag 1. Detected by
listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with
RSSI -53.
Table 49 IDS and DoS Log Messages (continued)
Message Type Example Log Message
Table 50 Rogue Detection Display Commands
Command Description
display rfdetect clients
[ mac mac-addr ]
Displays all wireless clients detected on the
air.
display rfdetect counters Displays statistics for rogue and Intrusion
Detection System (IDS) activity detected by
the MAPs managed by a WX switch.
display rfdetect mobility-domain
[ ssid ssid-name | bssid mac-addr ]
Displays information about rogues detected
in a Mobility Domain.
This command is valid only on the Mobility
Domain’s seed switch.