Technical data

Modifying Detection and Mitigation CLI Settings
© 2012 Meru Networks, Inc. Rogue AP Detection and Mitigation 193
Changing the Minimum RSSI with the CLI
RSSI is the threshold for which APs attempt to mitigate rogues; if the signal is very
week (distant AP), APs won’t try to mitigate it.
The command to change the minimum RSSI (Received Signal Strength Indication)
level, over which a station will be mitigated is rogue-ap min-rssi. A level range of 0
of -100 is supported, with -100 being the default setting.
The following command sets the minimum RSSI level to -80:
controller (config)# rogue-ap min-rssi -80
controller (config)#
Table 13: CLI Commands for Rogue Mitigation
Rogue Mitigation Example
Rogue AP mitigation for APs in the blocked list is enabled and confirmed as follows:
controller# configure terminal
controller(config)# rogue-ap detection
controller(config)# rogue-ap mitigation selected
controller(config)# exit
controller# show rogue-ap globals
Global Settings
Detection : on
Mitigation : selected
Rogue AP Aging (seconds) : 60
Number of Candidate APs : 3
Number of Mitigating APs : 5
Scanning time in ms : 100
Operational time in ms : 400
Rogue Mitigation Command Action
rogue-ap mitigation all
Sets rogue mitigation for all rogue APs that are
not on the access control list.
rogue-ap mitigation selected
Sets rogue mitigation for all rogue APs that are
on the blocked list.
rogue-ap mitigation wiredrogue
Sets rogue mitigation for all wired-side rogue
APs. If rogue clients on the wired side are added
to the blocked ACL list, then only those listed
wired-side rogue clients are blocked.
show rogue-ap globals
Displays current rogue data.
rogue-ap mitigation none
Turns off rogue mitigation.