ZyXEL Communications NWA-3160 User Manual page 50

Chapter 3 Tutorials
In the figure, the solid circle represents the range of your wireless network, and
the dashed circle represents the extent of the coffee shop's wireless network. Note
that the two networks overlap. This means that one or more of your APs can
detect the AP (1) in the other wireless network.
When configuring the rogue AP feature on your NWAs in this example, you will
need to use the information in the following table. You need the IP addresses of
your APs to access their Web configurators, and you need the MAC address of
each AP to configure the friendly AP list. You need the IP address of the mail
server to set up e-mail alerts.
Table 3 Tutorial: Rogue AP Example Information
DEVICE
Access Point A
Access Point B
Access Point C
Access Point D
File / Mail Server E
Access Point 1
Note: The NWA can detect the MAC addresses of APs automatically. However, it is
more secure to obtain the correct MAC addresses from another source and add
them to the friendly AP list manually. For example, an attacker's AP mimicking
the correct SSID could be placed on the friendly AP list by accident, if selected
from the list of auto-detected APs.
In this example you have spoken to the coffee shop's owner, who has told you
the correct MAC address of his AP.
In this example, you will do the following things.
Set up and save a friendly AP list.
1
Activate periodic Rogue AP Detection.
2
Set up e-mail alerts.
3
Configure your other access points.
4
Test the setup.
5
50
IP ADDRESS
192.168.1.1
192.168.1.2
192.168.1.3
192.168.1.4
192.168.1.25
UNKNOWN
MAC ADDRESS
00:AA:00:AA:00:AA
AA:00:AA:00:AA:00
A0:0A:A0:0A:A0:0A
0A:A0:0A:A0:0A:A0
N/A
AF:AF:AF:FA:FA:FA
NWA-3160 Series User's Guide