ZyXEL Communications NWA-3166, User Manual

Page: 48 / 332

Chapter 3 Tutorials
NWA-3166 User’s Guide
48
In the figure, the solid circle represents the range of your wireless network, and
the dashed circle represents the extent of the coffee shop’s wireless network. Note
that the two networks overlap. This means that one or more of your APs can
detect the AP (1) in the other wireless network.
When configuring the rogue AP feature on your NWAs in this example, you will
need to use the information in the following table. You need the IP addresses of
your APs to access their Web configurators, and you need the MAC address of
each AP to configure the friendly AP list. You need the IP address of the mail
server to set up e-mail alerts.
Note: The NWA can detect the MAC addresses of APs automatically. However, it is
more secure to obtain the correct MAC addresses from another source and add
them to the friendly AP list manually. For example, an attacker’s AP mimicking
the correct SSID could be placed on the friendly AP list by accident, if selected
from the list of auto-detected APs.
In this example you have spoken to the coffee shop’s owner, who has told you
the correct MAC address of his AP.
In this example, you will do the following things.
1
Set up and save a friendly AP list.
2
Activate periodic Rogue AP Detection.
3
Set up e-mail alerts.
4
Configure your other access points.
5
Test the setup.
Table 3 Tutorial: Rogue AP Example Information
DEVICE IP ADDRESS MAC ADDRESS
Access Point A 192.168.1.1 00:AA:00:AA:00:AA
Access Point B 192.168.1.2 AA:00:AA:00:AA:00
Access Point C 192.168.1.3 A0:0A:A0:0A:A0:0A
Access Point D 192.168.1.4 0A:A0:0A:A0:0A:A0
File / Mail Server E 192.168.1.25 N/A
Access Point 1 UNKNOWN AF:AF:AF:FA:FA:FA