3Com WX1200 3CRWX120695A, WXR100 3CRWXR10095A manual Displaying RF, Detection information

590CHAPTER 26: ROGUE DETECTION AND COUNTERMEASURES

Table 49 IDS and DoS Log Messages (continued)

Message Type	Example Log Message
Spoofed AP	AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is being spoofed.
	Received fingerprint 1122343 does not match our
	fingerprint 123344.
	Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1),
	channel 11 with RSSI -53.
Disallowed SSID	AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of
detected	ssid-list.
	Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1),
	channel 11 with RSSI -53.
AP from disallowed	AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of
vendor detected	vendor-list.
	Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1),
	channel 11 with RSSI -53.
Client from	Client Mac aa:bb:cc:dd:ee:ff is not part of vendor-list.
disallowed vendor	Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1),
detected	channel 11 with RSSI -53.
Interfering client seen	Client Mac aa:bb:cc:dd:ee:ff is seen on the wired network
on wired network	by WX 10.1.1.1 on port 3 vlan 2 tag 1. Detected by
	listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with
	RSSI -53.

Displaying RF	You can use the CLI commands listed in Table 50 to display rogue
Detection	detection information.
Information
	Table 50 Rogue Detection Display Commands
	Command	Description
	display rfdetect clients	Displays all wireless clients detected on the
	[mac mac-addr]	air.
	display rfdetect counters	Displays statistics for rogue and Intrusion
		Detection System (IDS) activity detected by
		the MAPs managed by a WX switch.
	display rfdetect mobility-domain	Displays information about rogues detected
	[ssid ssid-name bssid mac-addr]	in a Mobility Domain.

This command is valid only on the Mobility

Domain’s seed switch.