Detecting and disabling rogue access points in a network
AssigneeAdtran, Inc.
InventorsMark C. Rudolph, Timothy James Schlichter, Thomas F. Guevin
Life of this patent
Estimating the term…
Abstract
A rogue access point in a wireless local-area network can be disabled by an authorized access point wirelessly transmitting a layer-2 broadcast packet. If a rogue access point receives this broadcast packet, it will forward a copy to the switch to which it is connected. The switch then determines whether the port on which the copy of the broadcast packet is received is associated an authorized access point port. If the switch determines the port is not an authorized access point port, the switch shuts down the port.
Claims15
A method for disabling an access point in a wireless local-area network, comprising:
- a first access point originating a broadcast packet containing a unique tag independently of operation of any network devices in wired communication with the first access point and wirelessly transmitting the broadcast packet;
- a network switch receiving a forwarded copy of the broadcast packet from a second access point connected via a wired connection to a port of the network switch;
- the network switch determining in response to receipt of the forwarded copy of the broadcast packet whether the port is an authorized access point port;
- and
- the network switch shutting down the port if the network switch determines the port is not an authorized access point port.
A system for disabling an access point in a wireless local-area network, comprising:
- a first access point configured to originate a broadcast packet containing a unique tag independently of operation of any network devices in wired communication with the first access point and wirelessly transmit the broadcast packet;
- and
- a network switch configured to receive a forwarded copy of the broadcast packet from a second access point connected via a wired connection to a port of the network switch, the network switch further configured to determine in response to receipt of the forwarded copy of the broadcast packet whether the port is an authorized access point port and to shut down the port if the network switch determines the port is not an authorized access point port.
A computer program product for disabling an access point in a wireless local-area network, the computer program product comprising computer-readable media having stored thereon in non-transitory computer-readable form:
- broadcast packet transmit logic for configuring a first access point to originate a broadcast packet containing a unique tag independently of operation of any network devices in wired communication with the first access point and wirelessly transmit the broadcast packet;
- broadcast packet receive logic for configuring a network switch to receive a forwarded copy of the broadcast packet from a second access point connected via a wired connection to a port of the network switch;
- port authorization check logic for configuring the network switch to determine in response to receipt of the forwarded copy of the broadcast packet whether the port is an authorized access point port;
- and
- port shutdown logic for configuring the network switch to shut down the port if the network switch determines the port is not an authorized access point port.
Dependencies are inferred from the claim text.