Enabling Countermeasures - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

Enabling Countermeasures

Caution: Countermeasures affect wireless service on a radio. When an AP radio is sending
countermeasures, the radio is disabled for use by network traffic, until the radio finishes sending the
countermeasures.
Countermeasures are disabled by default. You can enable them on an individual radio profile basis. To
enable countermeasures on a radio profile, use the following command:
set radio-profile name countermeasures {all | rogue | configured | none}
The all option enables or disables countermeasures for rogues and for interfering devices. This option
is equivalent to the scope of rogue detection in MSS Version 3.x. The rogue option enables or disables
countermeasures for rogues only.
The configured option causes radios to attack only devices specified in the attack list on the switch
(on-demand countermeasures). When this option is used, devices found to be rogues by other means,
such as policy violations or by determining that the device is providing connectivity to the wired network,
are not attacked.
The none option disables countermeasures for this radio profile.
The following command enables countermeasures in radio profile radprof3 for rogues only:
DWS-1008# set radio-profile radprof3 countermeasures rogue
success: change accepted.
The following command causes radios managed by radio profile radprof3 to issue countermeasures
against devices in the switch's attack list:
DWS-1008# set radio-profile radprof3 countermeasures configured
success: change accepted.
To disable countermeasures on a radio profile, use the following command:
clear radio-profile name countermeasures
The following command disables countermeasures in radio profile radprof3:
DWS-1008# clear radio-profile radprof3 countermeasures
success: change accepted.
D-Link DWS-1008 User Manual 8