RF Detection Commands 535

WSS# show rfdetect data Total number of entries: 197 Flags: i = infrastructure, a = ad-hoc

c = CCMP, t = TKIP, 1 = 104-bit WEP, 4 = 40-bit WEP, w = WEP(non-WPA)

BSSID

Vendor Type Port/Radio/Ch Flags RSSI Age SSID

----------------- ------- ----- ------------- ------ ---- --- -----------------

00:07:50:d5:cc:91

Cisco intfr

3/1/6

i----

w

-61

6 r27-cisco1200-2

00:07:50:d5:dc:78

Cisco intfr

3/1/6

i----

w

-82

6 r116-cisco1200-2

00:09:b7:7b:8a:54

Cisco intfr

3/1/2

i----- -

57

6

00:0a:5e:4b:4a:c0

3Com intfr

3/1/11

i----- -

57

6 public

00:0a:5e:4b:4a:c2

3Com intfr

3/1/11

i-t1-- -

86

6 nortelwlan

00:0a:5e:4b:4a:c4

3Com intfr

3/1/11

ic---- -

85

6 nrtl-ccmp

00:0a:5e:4b:4a:c6

3Com intfr

3/1/11

i-----t---

w-

85

6 nrtl-tkip

00:0a:5e:4b:4a:c8

3Com intfr

3/1/11

i

-83

6 nrtl-voip

00:0a:5e:4b:4a:ca

3Com intfr

3/1/11

i----- -

85

6 nrtl-webaaa

...

 

 

 

 

 

 

Table 80 describes the fields in this display.

 

Table 4: show rfdetect data Output

 

 

Field

Description

 

 

BSSID

MAC address of the SSID used by the detected device.

 

 

Vendor

Company that manufactures or sells the rogue device.

 

 

Type

Classification of the rogue device:

 

rogue—Wireless device that is not supposed to be on the

 

network. The device has an entry in a WSS’s FDB and is

 

therefore on the network.

 

intfr—Wireless device that is not part of your network but is

 

not a rogue. The device does not have an entry in a WSS’s

 

FDB and is not actually on the network, but might be causing

 

RF interference with AP radios.

 

known—Device that is a legitimate member of the network.

 

 

Port/Radio/Channel

Port number, radio number, and channel number of the radio that detected the

 

rogue. For a AP, the connection number is labeled ap. (This stands for ap.)

 

 

Flags

Classification and encryption information for the rogue:

 

• The i, a, or u flag indicates the classification.

 

• The other flags indicate the encryption used by the rogue.

 

For flag definitions, see the key in the command output.

 

 

RSSI

Received signal strength indication (RSSI)—the strength of the RF signal

 

detected by the AP radio, in decibels referred to 1 milliwatt (dBm).

 

 

Age

Number of seconds since an AP radio last detected 802.11 packets from the

 

device.

 

 

Nortel WLAN—Security Switch 2300 Series Command Line Reference

Page 535
Image 535
Nortel Networks 2300 Series manual Show rfdetect data Output