D-Link DWC-1000 User Manual - Page 288

Wireless Controller User Manual s t an d alo n e A P in t h e lo cal o r RA DIUS Valid A P d at ab as e. Th is t es t may d et ect n et wo rk mis co n fig u rat io n as well as p o t en t ial in t ru s io n at t emp t s . Th e fo llo win g p aramet ers are ch ecked : • Ch an n el Nu mb er • SSID • Security Mode • WDS Mode. • Pres ence on a wired network. Unexpected WDS devi ce detected on network : If t h e A P is clas s ified as a Managed or Unknown AP and wireles s dis tribution s ys tem (W DS) traffic is detected on the A P, then the A P is considered to be Rogue. Only s tand -alone A Ps t h at are exp licit ly allo wed t o o p erat e in W DS mo d e are n o t rep o rt ed as ro g u es b y this tes t. Unmanag ed AP dete cted on wi red network : Th is t es t ch ecks wh et h er t h e A P is detected on the wired network. If the A P s tate is Unknown, then the tes t changes the AP s tate to Rogue. The flag indicating whether AP is detected on the wired n et wo rk is rep o rt ed as p art o f t h e RF Scan rep o rt . If A P is man ag ed an d is d et ect ed o n t h e n et wo rk t h en t h e co n troller s imp ly rep o rt s t h is fact an d d o es n 't ch an g e t h e AP s tate to Rogue. In order for the wireles s s ys tem to detect this threat, the wireles s n et wo rk mu s t co n t ain o n e o r mo re rad io s t h at o p erat e in s en t ry mo d e Rog ue Detected Trap Interval : Sp ecify t h e in t erv al, in s eco n d s , b et ween t ran s mis sio ns o f t h e SNM P t rap t ellin g t h e admin is t rator t h at ro g ue A Ps are p resent in the RF Scan databas e. If you s et the value to 0, the trap is never s ent. Wi red Network Detecti on Interval : Sp ecify t h e n u mb er o f s eco n d s t h at t h e A P waits before s tarting a new wired network detection cycle. If you s et the value to 0, wired network detection is dis abled AP De-Authenti cati on Attack : En ab le o r d is ab le t h e A P d e-aut hen t icat io n at t ack. The wireles s controller can protect against rogue A Ps by sending DE authentication mes s ag es t o t h e ro g u e A P. Th e d e -au t h en t icat io n at t ack feat u re mu s t b e g lo b ally enabled in order for the wireles s s ys tem to do this funct ion. Make s ure that no 286