Nortel Networks 2300 manual Configuring an Attack List, Set rfdetect attack-list mac-addr

Rogue Detection and Countermeasures 547

Configuring an Attack List

The attack list specifies the MAC address of devices that WSS Software should issue countermeasures against whenever the devices are detected on the network. The attack list can contain the MAC addresses of APs and clients.

By default, the attack list is empty. The attack list applies only to the WSS switch on which the list is configured. WSS switches do not share attack lists.

To add an entry to the list, use the following command:

set rfdetect attack-list mac-addr

The following command adds MAC address aa:bb:cc:44:55:66 to the attack list:

23x0# set rfdetect attack-list 11:22:33:44:55:66

success: MAC 11:22:33:44:55:66 is now in attacklist.

To display the attack list, use the following command:

show rfdetect attack-list

The following example shows the attack list on WSS switch:

23x0# show rfdetect attack-list
Total number of entries: 1
Attacklist MAC	Port/Radio/Chan	RSSI	SSID
-----------------	-----------------	------	------------
11:22:33:44:55:66	dap 2/1/11	-53	rogue-ssid

To remove a MAC address from the attack list, use the following command:

clear rfdetect attack-list mac-addr

The following command clears MAC address 11:22:33:44:55:66 from the attack list:

23x0# clear rfdetect attack-list 11:22:33:44:55:66

success: 11:22:33:44:55:66 is no longer in attacklist.

Nortel WLAN Security Switch 2300 Series Configuration Guide