Table of Contents
Advertisement
Countermeasures
Enabling
Countermeasures
Attacking Specific
Rogues
You can enable MSS to use countermeasures against rogues.
Countermeasures consist of packets that interfere with a client's ability to
use the rogue.
Countermeasures are disabled by default. When you enable them, all
devices of interest that are not in the known devices list become viable
targets for countermeasures. The Mobility Domain's seed switch
automatically selects individual radios to send the countermeasure
packets.
You can issue countermeasures against specific devices. In this case, MSS
attacks only those devices.
Countermeasures are disabled by default. To enable them, use the
following command:
set rfdetect countermeasures {enable | disable}
This command enables or disables countermeasures on all MAP radios in
the Mobility Domain. The command is valid only on the Mobility
Domain's seed switch. After you enter this command, MSS uses the RF
detection scan results to select rogues to attack.
CAUTION: Countermeasures affect wireless service on a radio. When a
MAP radio is sending countermeasures, the radio is disabled for use by
network traffic, until the radio finishes sending the countermeasures.
CAUTION: Any third-party transmitter that is not in the known devices
list is considered to be a rogue. To prevent MSS from attacking a friendly
device, add the device to known devices list. (See "Ignoring Friendly
Third-Party Devices".)
To enable countermeasures, type the following command on the seed
switch of the Mobility Domain:
WX1200# set rfdetect countermeasures enable
success:
countermeasures are now enabled.
You can instruct MSS to begin countermeasures against a specific rogue.
This is useful if the rogue list is large and you want to ensure that
countermeasures begin against a specific rogue immediately.
Enabling Countermeasures
379
Advertisement
Table of Contents
