D-Link DWS-4000 Series Cli Command Reference page 347

Format
show wireless client <macaddr> detected-client roam-history
Mode Privileged EXEC
Field Description
Mac Address The Ethernet address of the client.
AP Mac Address The Ethernet address of the Access Point with which the client is pre-authenticated.
(Radio)
Radio The radio interface on the AP.
VAP Mac Address The Ethernet address of the VAP to which client has roamed.
SSID The RF Noise perceived by the reporting AP for the specified detected client.
Auth Status Shows if the client authentication was due to new authentication or roaming.
Time Since Roam Time since entry was last updated.
show wireless client detected-client rogue-classification
Use this command to display the WIDS rogue classification test results for a particular client MAC address.
Format
show wireless client <macaddr> detected-client rogue-classification
Mode Privileged EXEC
Field Description
macaddr The client MAC address.
Test ID Test identifier (WIDSCLNTROGUEnn).
Detect Indicates whether this test detected the condition that it is designed to detect. Valid values are no
detection or Condition Detected.
MAC Addr (radio) The Managed AP MAC address and (radio number) that last reported detecting this condition.
Config Indicates whether this test is configured to report rogues. Valid values are Enable or Disable.
Result Indicates whether this test reported the device as rogue. Valid values are Rogue or empty string.
1st Report Time stamp indicating how long ago this test first detected the condition.
Last Report Time stamp indicating how long ago this test last detected the condition.
Example: The following shows example CLI display output for the command.
(DWS-4026) # show wireless client 00:02:BB:00:14:02 detected-client rogue-classification
WIDSCLNTROGUE1................................. Client not in Known Client Database
WIDSCLNTROGUE2................................. Client exceeds configured rate
WIDSCLNTROGUE3................................. Client exceeds configured rate
WIDSCLNTROGUE4................................. Client exceeds configured rate
WIDSCLNTROGUE5................................. Client exceeds max failing
WIDSCLNTROGUE6................................. Known client authenticated with
Detected Clients Database Commands
for auth msgs
for probe msgs
for de-auth msgs
authentications
unknown AP
339