beautypg.com

Displaying rogue clients – 3Com WX4400 3CRWX440095A User Manual

Page 592

background image

592

C

HAPTER

26: R

OGUE

D

ETECTION

AND

C

OUNTERMEASURES

Displaying Rogue

Clients

To display the wireless clients detected by a WX switch, use the following
command:

display rfdetect clients [mac mac-addr]

The following command shows information about all wireless clients
detected by a WX switch’s MAPs:

WX# display rfdetect clients
Total number of entries: 58
Client MAC

Client

AP MAC

AP

AP/Radio

NoL Type Last

Vendor Vendor

/Channel

seen

----------------- ------- ----------------- ------- ---------- --- ----- ----
00:04:23:53:4c:39

Intel

Unknown

7/1/3 1

intfr 56

00:05:4e:4f:fa:1d Unknown 00:0b:0e:23:1e:c1 3Com

7/2/44

2 intfr 103

00:05:5d:79:ce:03 D-Link

Unknown

7/1/10 2

intfr

151

00:05:5d:79:ce:04 D-Link

Unknown

7/1/9 1

intfr 77

00:05:5d:7e:96:a1 D-Link

Unknown

7/2/52 1

intfr 6

00:05:5d:7e:96:ce D-Link

Unknown

7/2/48 2

intfr 70

00:05:5d:97:97:82 D-Link

Unknown

7/2/52 1

intfr

812

00:06:25:13:07:5f

Linksys

Unknown

7/1/6 1

intfr 54

00:09:5b:66:ec:1b

Netgear

Unknown

7/2/64 2

intfr 28

00:0b:0e:0c:10:ff 3Com 00:0b:0e:30:83:41 3Com

7/2/161

1 intfr 205

00:0b:0e:17:bb:3f 3Com 00:0b:0e:31:55:41 3Com

7/2/153

1 intfr

15

The following command displays more details about a specific client:

WX1200# display rfdetect clients mac 00:0c:41:63:fd:6d
Client Mac Address: 00:0c:41:63:fd:6d, Vendor: Linksys
Port: dap 1, Radio: 1, Channel: 11, RSSI: -82, Rate: 2, Last Seen (secs ago): 84
Bssid: 00:0b:0e:01:02:00, Vendor: 3Com, Type: intfr, Dst: ff:ff:ff:ff:ff:ff
Last Rogue Status Check (secs ago): 3

The first line lists information for the client. The other lines list
information about the most recent 802.11 packet detected from the
client.