Installation guide

Wireless Guide 91
Configuring Wireless LANs to Capture
Figure 9-6. 802.11 Options Tab Settings
The 802.11 Options tab settings let you specify how the Expert identifies
rogue entities on the wireless network:
 During capture with the Enable Rogue AP Lookup option enabled, the
Expert compares the MAC address (not the IP address) of each
detected access point to those in the Known Access Points in the
Network list. If the access point’s MAC address is not in the list, the
Expert generates the Rogue Access Point alarm.
 During capture with the Enable Rogue Mobile Unit option enabled, the
Expert compares the MAC address (not the IP address) of each
detected mobile unit to those in the Known Mobile Units in the
Network list. If the mobile unit’s MAC address is not in the list, the
Expert generates the Rogue Mobile Unit alarm.
In addition, the Expert further identifies rogues (access points and
workstations) by adding the word
Rogue in parentheses following the offending
stations’ entries in Expert Summary and Detail displays. This provides you with
a handy means of identifying units on the wireless network of which you were
not aware, some of which may be unauthorized intruders.
If this option is enabled
during capture, the Expert
will flag access points
whose MAC addresses are
not in the Known Access
Points list as rogues.
If this option is enabled
during capture, the Expert
will flag mobile units whose
MAC addresses are not in
the Known Mobile Units list
as rogues.