354
DWS-1008 User’s Manual
D-Link Systems, Inc.
Rogue Detection and Countermeasures
To remove a MAC address from the attack list, use the following command:
clear
rfdetect
attack-list
mac-addr
The following command clears MAC address 11:22:33:44:55:66 from the attack list:
DWS-1008#
clear rfdetect attack-list 11:22:33:44:55:66
success: 11:22:33:44:55:66 is no longer in attacklist.
Configuring an Ignore List
By default, when countermeasures are enabled, MSS considers any non-D-Link transmitter
to be a rogue device and can send countermeasures to prevent clients from using that device.
To prevent MSS from sending countermeasures against a friendly device, add the device to
the known devices list:
To add a device to the ignore list, use the following command:
set
rfdetect
ignore
mac-addr
The
mac-addr
is the BSSID of the device you want to ignore.
Note:
If you try to initiate countermeasures against a device on the ignore list, the ignore list
takes precedence and MSS does not issue the countermeasures. Countermeasures apply
only to rogue devices.
To ignore BSSID
aa:bb:cc:11:22:33
during all RF scans, type the following command:
DWS-1008#
set rfdetect ignore aa:bb:cc:11:22:33
success: MAC aa:bb:cc:11:22:33 is now ignored.
To remove a BSSID from the ignore list, use the following command:
clear rfdetect
ignore
mac-addr
To display the ignore list, use the following command:
show rfdetect
ignore
The following command displays an ignore list containing two BSSIDs:
DWS-1008#
show rfdetect ignore
Total number of entries: 2
Ignore MAC
-------------------------
aa:bb:cc:11:22:33
aa:bb:cc:44:55:66
Summary of Contents for DWS-1008
Page 1: ......
