Configuring Rogue Detection Lists 579The following command clears MAC address 11:22:33:44:55:66 from theattack list:WX4400# clear rfdetect attack-list 11:22:33:44:55:66success: 11:22:33:44:55:66 is no longer in attacklist.Configuring anIgnore ListBy default, when countermeasures are enabled, MSS considers anynon-3Com transmitter to be a rogue device and can sendcountermeasures to prevent clients from using that device. To preventMSS from sending countermeasures against a friendly device, add thedevice to the known devices list:If you add a device that MSS has classified as a rogue to the permittedvendor list or permitted SSID list, but not to the ignore list, MSS can stillclassify the device as a rogue. Adding an entry to the permitted vendorlist or permitted SSID list merely indicates that the device is from anallowed manufacturer or is using an allowed SSID. However, to causeMSS to stop classifying the device as a rogue, you must add the device’sMAC address to the ignore list.To add a device to the ignore list, use the following command:set rfdetect ignore mac-addrThe mac-addr is the BSSID of the device you want to ignore.If you try to initiate countermeasures against a device on the ignore list,the ignore list takes precedence and MSS does not issue thecountermeasures. Countermeasures apply only to rogue devices.To ignore BSSID aa:bb:cc:11:22:33 during all RF scans, type the followingcommand:WX1200#set rfdetect ignore aa:bb:cc:11:22:33success: MAC aa:bb:cc:11:22:33 is now ignored.To remove a BSSID from the ignore list, use the following command:clear rfdetect ignore mac-addrTo display the ignore list, use the following command:display rfdetect ignore
