D-Link DWS-1008 User Manual
81
Configuring Rogue Detection Lists
The following sections describe how to configure lists to specify the devices that are allowed on the
network and the devices that MSS should attack with countermeasures.
Configuring a Permitted Vendor List
The permitted vendor list specifies the third-party AP or client vendors that are allowed on the network.
MSS does not list a device as a rogue or interfering device if the device’s OUI is in the permitted vendor
list.
By default, the permitted vendor list is empty and all vendors are allowed. If you configure a permitted
vendor list, MSS allows only the devices whose OUIs are on the list. The permitted vendor list applies
only to the switch on which the list is configured. DWS-1008 switches do not share permitted vendor
lists.
If you add a device that MSS has classified as a rogue to the permitted vendor list, but not to the ignore
list, MSS can still classify the device as a rogue. Adding an entry to the permitted vendor list merely
indicates that the device is from an allowed vendor. However, to cause MSS to stop classifying the
device as a rogue, you must add the device’s MAC address to the ignore list.
To add an entry to the permitted vendor list, use the following command:
set rfdetect vendor-list {client | ap}
mac-addr
The following command adds an entry for clients whose MAC addresses start with aa:bb:cc:
DWS-1008#
set rfdetect vendor-list client aa:bb:cc:00:00:00
success: MAC aa:bb:cc:00:00:00 is now in client vendor-list.
The trailing 00:00:00 value is required.
To display the permitted vendor list, use the following command:
show rfdetect vendor-list
The following example shows the permitted vendor list on a switch:
DWS-1008#
show rfdetect vendor-list
Total number of entries: 1
OUI
Type
----------------------------------------
aa:bb:cc:00:00:00
client
11:22:33:00:00:00
ap
To remove an entry from the permitted vendor list, use the following command:
clear rfdetect vendor-list {client | ap} {
mac-addr
| all}
The following command removes client OUI aa:bb:cc:00:00:00 from the permitted vendor list:
DWS-1008#
clear rfdetect vendor-list client aa:bb:cc:00:00:00
success: aa:bb:cc:00:00:00 is no longer in client vendor-list.
Summary of Contents for DWS-1008
Page 1: ......
