D-Link DWS-4026 [487/741] Ap de authentication attack status

MonitoringStatusandStatistics

D-Link UnifiedWiredandWirelessAccessSystem

November2011 Page487

D‐LinkUWSUserManual

APDe‐AuthenticationAttackStatus

TheAPDe‐AuthenticationAttackStatuspagecontainsinformationaboutrogueAPsthattheCluster

Controllerhasattackedbyusingthede‐authenticationattackfeature.

ThewirelessswitchcanprotectagainstrogueAPsbysendingde‐authenticationmessagestotherogueAP.The

de‐authenticationattackfeaturemustbeglobally enabledinor

derforthewirelesssystemtodothisfunction.

MakesurethatnolegitimateAPsareclassifiedasroguesbeforeenablingtheattackfeature.Thisfeatureis

disabledbydefault.

Thewirelesssystemcanconductthede‐authenticationattackagainst16APsatthesametime.Theintentof

thisatta

ckistoserveasatemporarymeasureuntiltherogueAPislocatedanddisabled.

Thede‐authenticationattackisnoteffectiveforallroguetypes,andthereforeisnotusedoneverydetected

rogue.Thefollowingroguesarenotsubjectedtotheattack:

•IfthedetectedrogueisspoofingtheBSSI

DofthevalidmanagedAPthenthewirelesssystemdoesnot

attempttousetheattackbecausethatattackmaydenyservicetoalegitimateAPandprovideanother

avenueforahackertoattackthesystem.

•Thede‐authenticationattackisnoteffectiveagainstAdhocnetworksbecausethe

senetworksdonotuse

authentication.

•TheAPsoperatingonchannelsoutsideofthecountrydomainarenotattackedbecausesendinganytraffic

onillegalchannelsisagainstthelaw.

ThewirelessswitchmaintainsalistofBSSIDsagainstwhichitisconductingade‐authenticationattack.The

switchsendsthelis

tofBSSIDsandchannelsonwhichtherogueAPsareoperatingtoeverymanagedAP.

ClicktheMACaddressofanAPinthelisttoaccessthedetailedRFScaninformationfortheAP.

Figure323:APDe‐AuthenticationAttackStatus

ThefollowingtabledescribesthefieldsontheAPDe‐Authen

ticationAttackStatuspage.

Table290:APDe‐AuthenticationAttackStatus

Field Description

BSSID ShowstheBSSIDoftheAPagainstwhichtheattackislaunched.TheBSSIDisa

MACaddress.

Channel IdentifiesthechannelonwhichtherogueAPisoperating.

TimeSinceAttackStarted ShowstheamountoftimethathaspassedsincetheattackstartedontheAP.

RFScanReportAge Showstheamoun

toftimethathaspassedsincetheRFScanreportedthisAP.