Nortel 2350 用户指南

648 Rogue detection and counter measures

NN47250-500 (320657-F Version 02.01)

# show rfdetect visible ap 3 radio 1

Total number of entries: 104
Flags: i = infrastructure, a = ad-hoc
       c = CCMP, t = TKIP, 1 = 104-bit WEP, 4 = 40-bit WEP, w = WEP(non-WPA)
Transmit MAC      Vendor  Type  Ch  RSSI Flags  SSID
----------------- ------- ----- --- ---- ------ --------------------------------
00:07:50:d5:cc:91   Cisco intfr   6  -60 i----w r27-cisco1200-2
00:07:50:d5:dc:78   Cisco intfr   6  -82 i----w r116-cisco1200-2
00:09:b7:7b:8a:54   Cisco intfr   2  -54 i-----
00:0a:5e:4b:4a:c0    3Com intfr  11  -57 i----- public
00:0a:5e:4b:4a:c2    3Com intfr  11  -86 i-t1-- trapezewlan
00:0a:5e:4b:4a:c4    3Com intfr  11  -85 ic---- 

-ccmp

00:0a:5e:4b:4a:c6    3Com intfr  11  -85 i-t--- 

-tkip

00:0a:5e:4b:4a:c8    3Com intfr  11  -83 i----w 

-voip

00:0a:5e:4b:4a:ca    3Com intfr  11  -85 i----- 

-web-based aaa

...

To display the current status of countermeasures against rogues in the Mobility Domain, use the following command:

This command is valid only on the Mobility Domain’s seed switch.

WSS# show rfdetect countermeasures

Total number of entries: 190
Rogue MAC         Type  Countermeasures    

-IPaddr       Port/Radio

                        Radio Mac                              /Channel
----------------- ----- ------------------ --------------- -------------
00:0b:0e:00:71:c0 intfr  00:0b:0e:44:55:66 10.1.1.23       ap 4/1/6
00:0b:0e:03:00:80 rogue  00:0b:0e:11:22:33 10.1.1.23       ap 2/1/11