Reset Search
 

 

Article

How does your ExtremeWireless access point with RADAR detect a rogue access point

« Go Back

Information

 
TitleHow does your ExtremeWireless access point with RADAR detect a rogue access point
Question
How does your ExtremeWireless access point with RADAR detect a rogue access point?
Environment
  • ExtremeWireless
  • Radar
  • WiPS
  • Rogue 
Answer
Our ExtremeWireless access points detect rogues by associating to the suspect rogue as if they were normal wireless clients. If the association succeeds the ExtremeWireless access points will attempt to obtain an IP address, ARP for the gateway MAC address and then send some messages through the suspect access point to its wired interface (using port 348 by default (configurable)). If the ExtremeWireless access points wired interface actually receives the test message then it is a strong indication that the suspect access point is, in fact, a rogue access point. 
Additional notes

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255