355
DWS-1008 User’s Manual
D-Link Systems, Inc.
Rogue Detection and Countermeasures
Enabling Countermeasures
Caution:
Countermeasures affect wireless service on a radio. When an AP radio is sending
countermeasures, the radio is disabled for use by network traffic, until the radio finishes
sending the countermeasures.
Countermeasures are disabled by default. You can enable them on an individual radio profile
basis. To enable countermeasures on a radio profile, use the following command:
set
radio-profile
name
countermeasures
{
all
|
rogue
}
The
all
option enables or disables countermeasures for rogues and for interfering devices.
The
rogue
option enables or disables countermeasures for rogues only.
The following command enables countermeasures in radio profile
radprof3
for rogues only:
DWS-1008#
set radio-profile radprof3 countermeasures rogue
success: change accepted.
To disable countermeasures on a radio profile, use the following command:
clear
radio-profile
name
countermeasures
The following command disables countermeasures in radio profile
radprof3
:
DWS-1008#
clear radio-profile radprof3 countermeasures
success: change accepted.
Disabling or Reenabling Active Scan
When active scanning is enabled, the AP radios managed by the switch look for rogue devices
by sending
probe any
frames (probes with a null SSID name), to solicit probe responses from
other APs.
Active scan is enabled by default. You can disable or reenable the feature on an individual
radio profile basis. To disable or reenable active scan on a radio profile, use the following
command:
set
radio-profile
name
active-scan
{
enable
|
disable
}
The following command disables active scan in radio profile
radprof3
:
DWS-1008#
set radio-profile radprof3 active-scan disable
success: change accepted.