Nortel Networks 2300 manual Configuring a Client Black List, Set rfdetect black-list mac-addr

546Rogue Detection and Countermeasures

Configuring a Client Black List

The client black list specifies clients that are not allowed on the network. WSS Software drops all packets from the clients on the black list.

By default, the client black list is empty. In addition to manually configured entries, the list can contain entries added by WSS Software. WSS Software can place a client in the black list due to an association, reassociation or disassociation flood from the client.

The client black list applies only to the WSS switch on which the list is configured. WSS switches do not share client black lists.

To add an entry to the list, use the following command:

set rfdetect black-list mac-addr

The following command adds client MAC address 11:22:33:44:55:66 to the black list:

23x0# set rfdetect black-list 11:22:33:44:55:66

success: MAC 11:22:33:44:55:66 is now blacklisted.

To display the client black list, use the following command:

show rfdetect black-list

The following example shows the client black list on WSS switch:

23x0# show rfdetect black-list
Total number of entries: 1
Blacklist MAC	Type	Port	TTL
----------------- -----------------		------- ---
11:22:33:44:55:66 configured		-	-
11:23:34:45:56:67 assoc req flood		3	25

To remove a MAC address from the client black list, use the following command:

clear rfdetect black-list mac-addr

The following command removes MAC address 11:22:33:44:55:66 from the black list:

23x0# clear rfdetect black-list 11:22:33:44:55:66

success: 11:22:33:44:55:66 is no longer blacklisted.

320657-A