3com WX2200 3CRWX220095A User Manual

Page of 728
580
C
HAPTER
 26: R
OGUE
 D
ETECTION
 
AND
 C
OUNTERMEASURES
The following command displays an ignore list containing two BSSIDs:
WX4400# display rfdetect ignore
Total number of entries: 2
Ignore MAC
-----------------
aa:bb:cc:11:22:33
aa:bb:cc:44:55:66
Enabling 
Countermeasures
Countermeasures are disabled by default. You can enable them on an 
individual radio profile basis. To enable countermeasures on a radio 
profile, use the following command:
set radio-profile name countermeasures {all | rogue | 
configured | none}
The all option enables or disables countermeasures for rogues and for 
interfering devices. This option is equivalent to the scope of rogue 
detection in MSS Version 3.x. The rogue option enables or disables 
countermeasures for rogues only. 
The configured option causes radios to attack only devices specified in 
the attack list on the WX switch (on-demand countermeasures). When 
this option is used, devices found to be rogues by other means, such as 
policy violations or by determining that the device is providing 
connectivity to the wired network, are not attacked.
The none option disables countermeasures for this radio profile.
The following command enables countermeasures in radio profile 
radprof3 for rogues only:
WX4400# set radio-profile radprof3 countermeasures rogue
success: change accepted.
The following command causes radios managed by radio profile radprof3 
to issue countermeasures against devices in the WX switch’s attack list: 
WX4400# set radio-profile radprof3 countermeasures configured
success: change accepted.
To disable countermeasures on a radio profile, use the following 
command:
clear radio-profile name countermeasures