Configuring Rogue Detection Lists; Configuring A Permitted Vendor List - Nortel 2360 Configuration Manual

Rogue Detection
Feature
Attack list
Ignore list
Countermeasures
Scheduled RF
Scanning
Nortel AP signature
Log messages and
traps

Configuring rogue detection lists

The following sections describe how to configure lists to specify the devices that are allowed on the network
and the devices that WSS Software should attack with countermeasures.
(For information about how WSS Software uses the lists, see

Configuring a permitted vendor list

The permitted vendor list specifies the third-party AP or client vendors that are allowed on the network. WSS
Software does not list a device as a rogue or interfering device if the device's OUI is in the permitted vendor
list.
Table 1.Rogue detection features (continued)
Description
List of AP MAC addresses to attack.
WSS Software can issue
countermeasures against these APs
whenever they are detected on the
network.
List of MAC addresses to ignore
during RF detection. WSS Software
does not classify devices on this list as
rogues or interfering devices, and does
not issue countermeasures against
them.
Packets sent by Nortel APs to interfere
with the operation of a rogue or
interfering device.
Countermeasures are configurable on a
radio-profile basis.
Scheduled RF Scanning sends probe
any requests (probes with a null SSID
name) to look for rogue APs.
Scheduled RF Scanning is configurable
on a radio-profile basis.
Value in an AP's management frames
that identifies the AP to WSS
Software. AP signatures help prevent
spoofing of the AP MAC address.
Messages and traps for rogue activity.
Messages are described in
DoS alerts" (page 638).
Nortel WLAN—Security Switch 2300 Series Configuration Guide
Rogue detection and counter measures 631
Applies To
Third-Party
APs
Yes
Yes
Yes
Yes
No
Yes
"IDS and
"Rogue detection lists" (page
Clients
No
Yes
Yes
No
No
Yes
626).)