Nortel 2350 User Guide

642 Rogue detection and counter measures

NN47250-500 (320657-F Version 02.01)

Fake AP SSID (when 
source MAC address is 
known)

FakeAP SSID attack detected from aa:bb:cc:dd:ee:ff. 
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.

Fake AP SSID (when 
source MAC address is 
not known)

FakeAP BSSID attack detected. 
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.

Spoofed SSID

AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is masquerading our ssid used by 
aa:bb:cc:dd:ee:fd. 
Detected by listener aa:bb:cc:dd:ee:fc(port 2, radio 1), channel 11 with 
RSSI -53.

Wireless bridge 
detected 

Wireless bridge detected with address aa:bb:cc:dd:ee:ff. 
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.

Netstumbler detected

Netstumbler detected from aa:bb:cc:dd:ee:ff. 
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.

Wellenreiter detected

Wellenreiter detected from aa:bb:cc:dd:ee:ff. 
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.

Ad-hoc client frame 
detected

Adhoc client frame detected from aa:bb:cc:dd:ee:ff. 
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.

Spoofed AP 

AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is being spoofed. Received 
fingerprint 1122343 does not match our fingerprint 123344. 
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with 
RSSI -53.

Disallowed SSID 
detected

AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of ssid-list. 
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with 
RSSI -53.

AP from disallowed 
vendor detected

AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of vendor-list. 
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with 
RSSI -53.

Client from disallowed 
vendor detected

Client Mac aa:bb:cc:dd:ee:ff is not part of vendor-list. Detected by 
listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with RSSI -53.

Interfering client seen 
on wired network

Client Mac aa:bb:cc:dd:ee:ff is seen on the wired network by WSS 
10.1.1.1 on port 3 vlan 2 tag 1. Detected by listener 
aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with RSSI -53.