Viewing Access Point Triangulation Status; Table 314: Detailed Access Point Rf Scan Status - D-Link DWS-4026 User Manual

Software User Manual
12/10/09
Field
MAC Address
SSID
Channel
Status
Initial Status
Transmit Rate
WIDS Rogue AP
Mitigation
Age
Discovered Age
BSSID
Physical Mode
Security Mode
802.11n Mode
Beacon Interval
Highest Supported Rate Highest supported rate advertised by this AP in the beacon frames. The rate is represented in
Peer Managed AP
Ad hoc Network
OUI Description

Viewing Access Point Triangulation Status

Triangulation information is provided to help locate the rogue client by showing which managed APs detect the each device
discovered through the RF Scan. Up to six triangulation entries are reported for each AP detected through the RF Scan:
three entries by non-sentry APs and three entries by sentry APs. Since an AP may have one radio configured in sentry mode
and another radio configured in non-sentry mode, the same AP can appear in both lists. If the AP has not been detected by
three APs, then the list may contain zero, one or two entries.
Document 34CSFP6XXUWS-SWUM100-D7

Table 314: Detailed Access Point RF Scan Status

Description
The Ethernet MAC address of the detected AP. This could be a physical radio interface or VAP
MAC. For D-Link APs this is always a VAP MAC address.
Service Set ID of the network, which is broadcast in the detected beacon frame.
Transmit channel of the AP.
Indicates the managed status of the AP, whether this is a valid AP known to the switch or a
Rogue on the network. The valid values are:
• Managed: The neighbor AP is managed by the wireless system.
• Standalone: The AP is managed in standalone mode and configured as a valid AP entry
(local or RADIUS).
• Rogue: The AP is classified as a threat by one of the threat detection algorithms.
• Unknown: The AP is detected in the network but is not classified as a threat by the threat
detection algorithms.
If the AP is not rogue, the initial status is equal to Status (Managed, Standalone, or Unknown).
For rogue APs, the initial status is the classification prior to this AP becoming rogue.
Indicates the rate at which the AP is currently transmitting data.
Status indicating whether rogue AP mitigation is in progress for this AP. If mitigation is not in
progress then this field displays the reason, which can be one of the following:
• Not Required (AP s not rogue)
• Already mitigating too many APs.
• AP Is operating on an illegal channel.
• AP is spoofing valid managed AP MAC address.
• AP is Ad hoc.
Time since this AP was last detected in an RF scan.
Time since this AP was first detected in an RF scan.
Basic Service Set Identifier advertised by the AP in the beacon frames.
Indicates the 802.11 mode being used on the AP.
Security mode used by the AP.
Indicates whether this AP supports IEEE 802.11n mode.
Beacon interval for the neighbor AP network.
increments of 1 Mbps.
Indicates whether this AP is managed by a switch in the cluster.
Indicates whether the beacon frame was received from an ad hoc network.
Identifies the manufacturer of the AP or wireless client adapter based on the information in the
OUI database on the switch.
D-Link Unified Access System
Monitoring and Managing Intrusion Detection Page 491