Conducting A Site Survey; Identifying Unauthorized Access Points - Colubris Networks CN3000 Administrator's Manual

Chapter 2 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - How it works - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Chapter 2
Conducting a To discover the operating frequencies of other access points in your area, open the
Wireless > Neighborhood page. The CN3000 will automatically scan to find all active
site survey
access points. For example:
Note: If an access point is not broadcasting its name, the SSID is blank.
Identifying Improperly configured wireless access points can seriously compromise the security of
a corporate network. Therefore, it is important that they be identified as quickly as
unauthorized
possible.
access points
The wireless neighborhood feature can be configured to automatically list all non-
authorized access points that are operating nearby.
To identify unauthorized access points, the CN3000 compares the MAC address of
each discovered access point against the list of authorized access points (which you
must define). If the discovered access point does not appear in the list, it is displayed in
the Unauthorized access points list.
List of authorized access points
The format of this file is XML. Each entry in the file is composed of two items: MAC
address and SSID. Each entry should appear on a new line. The easiest way to create
this file is to wait for a scan to complete, then open the list of all access points in Brief
format. Edit this list so that it contains only authorized access points and save it. Then,
specify the address of this file for the List of authorized access points parameter.
When you edit the Brief list you need to remove extra text that appears before and after
each MAC address. For example, if the brief list looks like this:
<?xml version='1.0'?> <simple-ap-list> # MAC
"AP_1"
00:03:52:07:f5:23 "AP_2"
00:03:52:07:f5:12 "AP_3"
</simple-ap-list>
Reformat the list to look like this:
00:03:52:07:f5:11 "AP_1"
00:03:52:07:f5:23 "AP_2"
00:03:52:07:f5:12 "AP_3"
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 36 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
SSID 00:03:52:07:f5:11