Grandstream Networks GWN76 Series User Manual page 81

Specify the rogue AP detect range.
• Same channel: AP will execute simple detection on the APs around, this mode almost has no
effects on the wireless network communication.
Detect range
• All channels: AP will execute a deep detection every 5 minutes. And the clients connecting to
the AP will have few seconds of communication interrupt.
Default is Same Channel.
Countermeasures level specifies the type of attacks which will be suspected by the AP. Select
different levels:
• High: Untrusted BSSID, Illegal access without authentication, Illegal access, Spoofing SSID.
Countermeasure
Level
• Medium: Untrusted BSSID, Illegal access without authentication, Illegal access.
• Low: Untrusted BSSID, Illegal access without authentication.
Default is Disabled.
Specify the containment range:
• Same channel: detect AP will countermeasure the APs in the same channel.
Containment Range
• All channels: detect AP will countermeasure the APs in all channels at the cost of consuming of
much AP performance.
Default is Same Channel.
Sub-string for
The AP broadcasting SSID with the specified string will be classified as a Spoofing SSID.
Spoofing SSID
You can specify MAC address of the trusted AP, which should be formatted as XX:XX:XX:XX:XX:XX.
Trusted AP
If an AP is defined as trusted AP, no countermeasures will be executed on it.
You can specify MAC address of the untrusted AP, which should be formatted as
Untrusted AP XX:XX:XX:XX:XX:XX. If an AP is defined as untrusted AP, countermeasures will be executed on it
when countermeasure is enabled.
In the figure below we would have a list showing all the detected rogue AP on the network scanned by the GWN access point.
Firewall
This section allows user to control the outgoing and incoming traffic from clients by manually setting up.
policies to either deny or permit the traffic based on protocol type and by specifying SSIDs and destinations.
Field Description
Rogue AP
Rogue AP-Detection
Firewall-Outbound