Displaying Rf Detection Information - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

Message Type
Wireless bridge detected
Netstumbler detected
Wellenreiter detected
Ad-hoc client frame detected
Spoofed AP
Disallowed SSID detected
AP from disallowed vendor detected
Client from disallowed vendor detected
Interfering client seen on wired network

Displaying RF Detection Information

You can use the CLI commands listed in the table below to display rogue detection information.
Command
show rfdetect clients [mac mac-addr]
show rfdetect counters
show rfdetect mobility-domain
[ssid ssid-name | bssid mac-addr]
show rfdetect data
show rfdetect visible mac-addr
show rfdetect visible ap AP-num [radio {1 | 2}]
show rfdetect visible dap dap-num [radio {1 | 2}]
D-Link DWS-1008 User Manual
Example Log Message
Wireless bridge detected with address aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Netstumbler detected from aa:bb:cc:dd:ee:ff. Seen by AP on
port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
Wellenreiter detected from aa:bb:cc:dd:ee:ff. Seen by AP on
port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
Adhoc client frame detected from aa:bb:cc:dd:ee:ff. Seen by
AP on port 2, radio 1 on channel 11 with RSSI -53 SSID
myssid.
AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is being spoofed.
Received fingerprint 1122343 does not match our fingerprint
123344. Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio
1), channel 11 with RSSI -53.
AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of ssid-
list. Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1),
channel 11 with RSSI -53.
AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of vendor-
list. Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1),
channel 11 with RSSI -53.
Client Mac aa:bb:cc:dd:ee:ff is not part of vendor-list.
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1),
channel 11 with RSSI -53.
Client Mac aa:bb:cc:dd:ee:ff is seen on the wired network
by 10.1.1.1 on port 3 vlan 2 tag 1. Detected by listener aa:
bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with RSSI -53.
Description
Displays all wireless clients detected on the air.
Displays statistics for rogue and Intrusion Detection System
(IDS) activity detected by the APs managed by an DWS-
1008 switch.
Displays information about rogues detected in your
network.
Displays information about all BSSIDs detected on the
air, and labels those that are from rogues or interfering
devices. This command is valid on any switch in the Mobility
Domain.
Displays the BSSIDs detected by a specific D-Link radio.