Grandstream Networks GWN76 Series User Manual page 87

Field Description
Enable Rogue AP
Select to either to enable or disable Rogue AP scan.
Detection
Specify the rogue AP detect range.
• Same channel: AP will execute simple detection on the APs around, this mode almost has no
effects on the wireless network communication.
Detect range
• All channels: AP will execute a deep detection every 5 minutes. And the clients connecting to
the AP will have few seconds of communication interrupt.
Default is Same Channel.
Countermeasures level specifies the type of attacks which will be suspected by the AP. Select
different levels:
• High: Untrusted BSSID, Illegal access without authentication, Illegal access, Spoofing SSID.
Countermeasure
Level
• Medium: Untrusted BSSID, Illegal access without authentication, Illegal access.
• Low: Untrusted BSSID, Illegal access without authentication.
Default is Disabled.
Specify the containment range:
• Same channel: detect AP will countermeasure the APs in the same channel.
Containment Range
• All channels: detect AP will countermeasure the APs in all channels at the cost of consuming of
much AP performance.
Default is Same Channel.
Sub-string for
The AP broadcasting SSID with the specified string will be classified as a Spoofing SSID.
Spoofing SSID
You can specify MAC address of the trusted AP, which should be formatted as XX:XX:XX:XX:XX:XX.
Trusted AP
If an AP is defined as trusted AP, no countermeasures will be executed on it.
Rogue AP-Configuration