Specifications

Displaying RF Detection Information
22-20 Rogue Detection and Countermeasures
Clients not present in vendor-list 0 0
Clients added to automatic black-list 0 0
Displaying SSID or BSSID Information for a Mobility Domain
TodisplaySSIDorBSSIDinformationforanentireMobilityDomain,usethefollowingcommand
ontheseedswitch:
showrfdetectmobility‐domain[ssid ssid‐name|bssidmac‐addr]
Examples
ThefollowingcommanddisplayssummaryinformationforallSSIDsandBSSIDsdetectedinthe
MobilityDomain:
RBT-8100# show rfdetect mobility-domain
Total number of entries: 194
Flags: i = infrastructure, a = ad-hoc, u = unresolved
c = CCMP, t = TKIP, 1 = 104-bit WEP, 4 = 40-bit WEP, w = WEP(non-WPA)
BSSID Vendor Type Flags SSID
----------------- ------------ ----- ------ --------------------------------
00:07:50:d5:cc:91 Cisco intfr i----w r27-cisco1200-2
00:07:50:d5:dc:78 Cisco intfr i----w r116-cisco1200-2
00:09:b7:7b:8a:54 Cisco intfr i-----
00:0a:5e:4b:4a:c0 enterasys intfr i----- public
00:0a:5e:4b:4a:c2 enterasys intfr i----w Enterasyswlan
00:0a:5e:4b:4a:c4 enterasys intfr ic----
ets-ccmp
00:0a:5e:4b:4a:c6 enterasys intfr i----w ets-tkip
00:0a:5e:4b:4a:c8 enterasys intfr i----w
ets-voip
00:0a:5e:4b:4a:ca enterasys intfr i-----
ets-webaaa
...
Thelinesinthisdisplayarecompiledfromdatafrommultiplelisteners(APradios).Ifanitemhas
thevalueunresolved,notalllistenersagreeonthevalueforthatitem.Generally,anunresolved
stateoccursonlywhenanAPoraMobilityDomainisstillcomingup,andlasts
onlybriefly.
ThefollowingcommanddisplaysdetailedinformationforroguesusingSSIDETS‐webaaa.
RBT-8100# show rfdetect mobility-domain ssid ets-webaaa
BSSID: 00:0a:5e:4b:4a:ca Vendor: 3Com SSID:
ets-webaaa
Type: intfr Adhoc: no Crypto-types: clear
RBT-IPaddress: 10.8.121.102 Port/Radio/Ch: 3/1/11 Mac: 00:0b:0e:00:0a:6a
Device-type: interfering Adhoc: no Crypto-types: clear
RSSI: -85 SSID:
ets-webaaa
BSSID: 00:0b:0e:00:7a:8a Vendor: Enterasys SSID:
ETS-webaaa
Type: intfr Adhoc: no Crypto-types: clear
Note: MSS generates log messages for most of these statistics. See “IDS and DoS Alerts” on
page 22-12.