Viewing Wlan Rogues - D-Link xStack DXS-3227 Web/Installation Manual

Viewing WLAN Rogues

Rogue AP is an unauthorized Access Point that presents potential security threat. When connected to a corporate
network, the AP rogus, as a resulte of security breaches, may allow access to corporate network for unauthorized
parties.
The 32xx supports Rogue AP detection and Containment. The Rogue AP detection detects rogue AP and neutral-
izes it. This is done by APs that are connected to the 32xx switch and are continuously scanning WLAN frequen-
cies. The AP may perform scanning while serving WLAN stations. It can also be configured to only perform
scanning with no WLAN service . When the APs report detects, using the UI, neighbors to the WLAN switch, the
detected neighbors in the rogue AP list can be displayed to the operator and allow to manually approve the neigh-
bor ,or, initiate rogue AP containment.
The AP containment is done by disrupting the rogue BSS operation. The AP continuously sends de-authenticate
frames to the rogue BSS. The frames are sent to a broadcast address and receive BSSID of the offender. As a
result, stations associated with the rogue AP will be disconnected to avoid further potential damage. To view
WLAN rogues:
• Click WLAN > System >Rogues. The WLAN Rogues Page opens:
Figure 90: WLAN Rogues Page
The WLAN Rogues Page contains the following fields:
• SSID — Displays the access point Service Set IDentifier (SSID) associated with the rogue. The SSID is the
name of the ESS to which the transceiver belongs.
• MAC Address — Displays the MAC address associated with the rogue WLAN device.
• Channel — Displays the access point channel used from which the rogue is transmitting.
• Last Seen — Indicates the last time the rogue was detected on wireless network.
• Status —Displays the Rogue status. The possible field values are:
– New — Indicates that the SSID is newly discovered.
Page 147
Defining WLAN
Defining WLAN System Properties