beautypg.com

H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 633

background image

612

Figure 645 Monitor AP for rogue detection

Hybrid mode—An AP can both scan devices in the WLAN and provide WLAN data services.

Figure 646 Hybrid AP for rogue detection

Taking countermeasures against rogue device attacks

You can enable the countermeasures on a monitor AP. The monitor AP downloads an attack list from the
AC according to the countermeasure mode, and takes countermeasures against detected rogue devices.

The processing methods vary with rogue devices:

If the rogue device is a rogue client, it is logged out.

If the rogue device is a rogue AP, legal clients will not use the rogue AP to access the WLAN.

If the rogue device is an ad-hoc client, it is denied, and ad-hoc clients cannot communicate with
each other.