Figure 342: Wids Client Rogue Classification; Table 310: Wids Client Rogue Classification - D-Link DWL-8600AP User Manual

D-Link UWS User Manual
The following table shows information about the security test performed on the detected client.
Field
MAC Address
Test Description
Condition Detected
Reporting MAC
Address
Radio
Test Config
Test Result
Time Since First Report Time stamp indicating how long ago this test first detected the condition.
Time Since Last Report Time stamp indicating how long ago this test last detected the condition.
Command Buttons
The page includes the following button:
D-Link
Oct. 2015

Figure 342: WIDS Client Rogue Classification

Table 310: WIDS Client Rogue Classification

Description
The Ethernet MAC address of the detected wireless client.
Identifies the tests that were performed, which includes the following:
• Client is denied access in the Known Client Database.
• Client exceeds the configured rate for transmitting 802.11 authentication
requests.
• Client exceeds the configured rate for transmitting probe requests.
• Client exceeds the configured rate for transmitting de-authentication requests.
• Client exceeds the maximum number of failing authentications.
• Known Client is authenticated with an Unknown AP.
• Client OUI is not in the OUI Database
Indicates whether the result of the test was true or false.
Identifies the MAC address of the AP that reported the test results.
Identifies which physical radio on the reporting AP was responsible for the test
results.
Shows whether this test is configured to report rogues. Each test can be globally
enabled or disabled to report a positive result as a rogue.
Shows whether this test reported the device as rogue. In some cases the test may
report a positive result, be enabled, but not report the device as rogue because the
device is allowed to operate in this mode.
Monitoring Status and Statistics
Unified Wired and Wireless Access System
Page 521