ZyXEL Communications ZyWALL 310 - Rogue AP; 10.1 Rogue AP Detection Overview; 10.2 Rogue AP Detection Commands

Chapter 10 Rogue AP
ZyWALL Series CLI Reference Guide
100
CHAPTER 10
Rogue AP
This chapter shows you how to set up Rogue Access Point (AP) detection and containment.
10.1 Rogue AP Detection Overview
Rogue APs are wireless access points operating in a network’s coverage area that are not under the
control of the network’s administrators, and can potentially open holes in the network security. Attackers
can take advantage of a rogue AP’s weaker (or non-existent) security to gain illicit access to the
network, or set up their own rogue APs in order to capture information from wireless clients.
Conversely, a friendly AP is one that the Zyxel Device network administrator regards as non-threatening.
This does not necessarily mean the friendly AP must belong to the network managed by the Zyxel
Device; rather, it is any unmanaged AP within range of the Zyxel Device’s own wireless network that is
allowed to operate without being contained. This can include APs from neighboring companies, for
example, or even APs maintained by your company’s employees that operate outside of the
established network.
10.2 Rogue AP Detection Commands
The following table identifies the values required for many of these commands. Other input values are
discussed with the corresponding commands.
The following table describes the commands available for rogue AP detection. You must use the
configure terminal command to enter the configuration mode before you can use these
commands.
Table 31 Input Values for Rogue AP Detection Commands
LABEL DESCRIPTION
ap_mac
Specifies the MAC address (in XX:XX:XX:XX:XX:XX format) of the AP to be added to
either the rogue AP or friendly AP list. The no command removes the entry.
description2
Sets the description of the AP. You may use 1-60 alphanumeric characters,
underscores (
_), or dashes (-). This value is case-sensitive.
Table 32 Command Summary: Rogue AP Detection
COMMAND DESCRIPTION
rogue-ap detection
Enters sub-command mode for rogue AP detection.
[no] activate
Activates rogue AP detection. Use the no parameter
to deactivate rogue AP detection.