D-Link DWS/DXS-3200 Viewing Wlan Rogues, Click Wlan System Rogues. The Wlan Rogues Page opens

Defining WLAN

Defining WLAN System Properties

Viewing WLAN Rogues

Rogue AP is an unauthorized Access Point that presents potential security threat. When connected to a corporate network, the AP rogus, as a resulte of security breaches, may allow access to corporate network for unauthorized parties.

The 32xx supports Rogue AP detection and Containment. The Rogue AP detection detects rogue AP and neutral- izes it. This is done by APs that are connected to the 32xx switch and are continuously scanning WLAN frequen- cies. The AP may perform scanning while serving WLAN stations. It can also be configured to only perform scanning with no WLAN service . When the APs report detects, using the UI, neighbors to the WLAN switch, the detected neighbors in the rogue AP list can be displayed to the operator and allow to manually approve the neigh- bor ,or, initiate rogue AP containment.

The AP containment is done by disrupting the rogue BSS operation. The AP continuously sends de-authenticate frames to the rogue BSS. The frames are sent to a broadcast address and receive BSSID of the offender. As a result, stations associated with the rogue AP will be disconnected to avoid further potential damage. To view WLAN rogues:

•Click WLAN > System >Rogues. The WLAN Rogues Page opens:

Figure 90: WLAN Rogues Page

The WLAN Rogues Page contains the following fields:

•SSID — Displays the access point Service Set IDentifier (SSID) associated with the rogue. The SSID is the name of the ESS to which the transceiver belongs.

•MAC Address — Displays the MAC address associated with the rogue WLAN device.

•Channel — Displays the access point channel used from which the rogue is transmitting.

•Last Seen — Indicates the last time the rogue was detected on wireless network.

•Status —Displays the Rogue status. The possible field values are:

–New — Indicates that the SSID is newly discovered.

Page 147