Displaying Rogue Clients - Nortel 2360 Configuration Manual

644 Rogue detection and counter measures
Table 3.Rogue detection show commands (continued)
Command
show rfdetect attack-list
show rfdetect ignore
(For information about the fields in the output, see the
Reference.)

Displaying rogue clients

To display the wireless clients detected by a WSS, use the following command:
show rfdetect clients [mac mac-addr]
The following command shows information about all wireless clients detected by a WSS's APs:
WSS
# show rfdetect clients
Total number of entries: 30
User Name Sess IP or MAC ID Address
----------------------- -------------------------------------
EXAMPLE
jose@example.com
00:30:65:16:8d:69
761
763
Client MAC Client Vendor
--------------- ----------------
00:03:7f:bf:16:70 Unknown
00:04:23:77:e6:e5 Intel
00:05:5d:79:ce:0f D-Link
00:05:5d:7e:96:a7 D-Link
00:05:5d:7e:96:ce D-Link
00:05:5d:84:d1:c5 D-Link
The following command displays more details about a specific client:
WSS# show rfdetect clients mac 00:0c:41:63:fd:6d
Client Mac Address: 00:0c:41:63:fd:6d, Vendor: Linksys
Port: ap 1, Radio: 1, Channel: 11, RSSI: -82, Rate: 2, Last Seen (secs ago): 84
Bssid: 00:0b:0e:01:02:00, Vendor: Nortel, Type: intfr, Dst: ff:ff:ff:ff:ff:ff
Last Rogue Status Check (secs ago): 3
The first line lists information for the client. The other lines list information about the most recent 802.11 packet
detected from the client.
NN47250-500 (320657-F Version 02.01)
5* 192.168.12.100
5125* 192.168.12.141
4385* 192.168.19.199
00:0b:be:15:46:56
00:02:2d:02:10:f5
AP MAC Vendor
--------------------
Unknown
Unknown
Unknown
Unknown
Unknown
Unknown
Description
Displays the list of wireless devices that you
want APs to attack with countermeasures. (See
"Configuring an attack list" (page
Displays the BSSIDs of third-party devices that
WSS Software ignores during RF detection
scans. (See "Configuring an ignore list"
(page 635).)
Nortel WLAN Security Switch 2300 Series Command Line
VLAN Name
----------------- ---------------
vlan-eng
vlan-eng
vlan-wep
(none)
(none)
AP Port/Radio/Channel
------------------------- -----------------------
ap 1/1/6
ap 1/1/2
ap 1/1/149
ap 1/1/149
ap 1/1/157
ap 1/1/1
634).)
Port/Radio
3/1
1/1
3/1
1/2
1/1
NoL Type Last seen
1 intfr 207
1 intfr 155
1 intfr 87
1 intfr 117
1 intfr 162
1 intfr 52