Nortel Networks NN47250-500 Enabling countermeasures

Rogue detection and counter measures 715
Nortel WLAN—Security Switch 2300 Series Configuration Guide
Enabling countermeasures
Countermeasures are disabled by default. You can enable them on an individual radio profile basis. To enable counter-
measures on a radio profile, use the following command:
set radio-profile name countermeasures {all | rogue | configured | none}
The all option enables or disables countermeasures for rogues and for interfering devices. This option is equivalent to
the scope of rogue detection in WSS Software Version 3.x. The rogue option enables or disables countermeasures for
rogues only.
The configured option causes radios to attack only devices specified in the attack list on the WSS (on-demand counter-
measures). When this option is used, devices found to be rogues by other means, such as policy violations or by
determining that the device is providing connectivity to the wired network, are not attacked.
The none option disables countermeasures for this radio profile.
The following command enables countermeasures in radio profile radprof3 for rogues only:
WSS# set radio-profile radprof3 countermeasures rogue
success: change accepted.
The following command causes radios managed by radio profile radprof3 to issue countermeasures against devices in
the WSS’s attack list:
WSS# set radio-profile radprof3 countermeasures configured
success: change accepted.
To disable countermeasures on a radio profile, use the following command:
clear radio-profile name countermeasures
The following command disables countermeasures in radio profile radprof3:
WSS# clear radio-profile radprof3 countermeasures
success: change accepted.
Caution! Countermeasures affect wireless service on a radio. When an AP radio is
sending countermeasures, the radio is disabled for use by network traffic, until the radio
finishes sending the countermeasures.