Wireless Access Point
Configuring the Wireless AP 263
Rogue Control List
This window allows you to set up a control list for rogue APs, based on a type
that you define. You may classify rogue APs as blocked, so that the AP will take
steps to prevent stations from associating with the blocked AP. See “About
Blocking Rogue APs” on page 375. The AP can keep up to 5000 list entries.
Figure 147. Rogue Control List
Procedure for Establishing Rogue AP Control
1. Rogue BSSID/SSID: Enter the BSSID, SSID, or manufacturer string to
match for the new rogue control entry. The Match Only radio buttons
specify what to match (e.g., the MAC address, SSID, or manufacturer).
You may use the “*” character as a wildcard to match any string at this
position. For example, 00:0f:7d:* matches any string that starts with
00:0f:7d:. Xirrus APs start with 00:0f:7d: or 50:60:28:00:0f:7d:*. By default,
the Rogue Control List contains two entries that match 00:0f:7d:* and
50:60:28:* and apply the classification Known to all Xirrus APs.
2. Rogue Control Classification: Enter the classification for the specified
rogue AP(s), either Blocked, Known or Approved.
The RF Monitor > Intrusion Detection window provides an alternate
method for classifying rogues. You can list all Unknown stations and select
all the rogues that you’d like to set to Known or Approved, rather than
entering the SSID/BSSID as described below. See “Rogues” on page 120.