beautypg.com

Summary of rogue detection features – 3Com WX4400 3CRWX440095A User Manual

Page 573

background image

Summary of Rogue Detection Features

573

Summary of Rogue
Detection Features

Table 48 lists the rogue detection features in MSS.

Table 48 Rogue Detection Features

Rogue
Detection
Feature

Description

Applies To

Third-Party
APs

Clients

Classification

MSS can classify third-party APs as
rogues or interfering devices. A
rogue is a third-party AP whose
MAC address MSS knows from the
wired side of the network. An
interfering device does not have a
MAC address known on the wired
side.

MSS can detect rogue clients, locate
their APs, and issue countermeasures
against the APs.

Yes

Yes

Permitted
vendor list

List of OUIs to allow on the network.
An OUI is the first three octets of a
MAC address and uniquely identifies
an AP’s or client’s vendor.

Yes

No

Permitted SSID
list

List of SSIDs allowed on the network.
MSS can issue countermeasures
against third-party APs sending
traffic for an SSID that is not on the
list.

Yes

Yes

Client black list

List of client or AP MAC addresses
that are not allowed on the wireless
network. MSS drops all packets from
these clients or APs.

Yes

Yes

Attack list

List of AP MAC addresses to attack.
MSS can issue countermeasures
against these APs whenever they are
detected on the network.

Yes

No

Ignore list

List of MAC addresses to ignore
during RF detection. MSS does not
classify devices on this list as rogues
or interfering devices, and does not
issue countermeasures against them.

Yes

Yes