display wlan ids rogue-history

Function

The display wlan ids rogue-history command displays historical records of rogue devices.

Format

display wlan ids rogue-history { all | ap | bridge | client | adhoc | ssid | mac-address mac-address }

Parameters

Parameter	Description	Value
all	Displays historical records of all rogue devices.	-
ap	Displays historical records of rogue APs.	-
bridge	Displays historical records of rogue bridge devices.	-
client	Displays historical records of rogue user terminals.	-
adhoc	Displays historical records of rogue ad-hoc devices.	-
ssid	Displays historical records of countered devices with unauthorized SSIDs.	-
mac-address mac-address	Displays historical records of devices with specified MAC addresses.	The MAC addresses must exist.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

You can run the display wlan ids rogue-history command to view the historical records of rogue devices.

Prerequisites

The device detection function has been enabled on the AP using the wids device detect enable command.

Example

# Display historical records of all rogue devices.

<HUAWEI> display wlan ids rogue-history all
Flags: a: adhoc, w: AP, b: wireless-bridge, c: client
CH: Channel number
-------------------------------------------------------------------------------
MAC address     Type  CH  Authentication   Last detected time   SSID
-------------------------------------------------------------------------------
000a-f7bc-1852  w     11  open             2014-11-20/11:20:37  wlan
000b-c002-9c81  c     11  -                2014-11-20/11:16:07  -
-------------------------------------------------------------------------------
Total: 2, printed: 2

**Table 1** Description of the **display wlan ids rogue-history all** command output
Item	Description
MAC address	MAC address of the rogue device listed in the historical record list.
Type	Type of the rogue device listed in the historical record list: a: user terminal on the ad-hoc network w: AP b: bridge device c: user terminal
CH	Channel in which the device is detected for the last time.
Authentication	Authentication mode of the rogue device listed in the historical record list.
Last detected time	Last time when the device is detected.
SSID	SSID of the detected device.

# Display historical records of rogue APs.

<HUAWEI> display wlan ids rogue-history ap
CH: channel number
-------------------------------------------------------------------------------
MAC address     CH  Authentication   Last detected time   SSID
-------------------------------------------------------------------------------
000a-f7bc-1852  11  open             2014-11-20/11:20:37  wlan
0022-aad0-c672  11  open             2014-11-20/11:20:44  -
-------------------------------------------------------------------------------
Total: 2, printed: 2

# Display historical records of SSIDs.

<HUAWEI> display wlan ids rogue-history ssid
#Dev: number of devices using SSID
-------------------------------------------------------------------------------
SSID                              #Dev  Last detected time
-------------------------------------------------------------------------------
trad                              1     2014-11-20/11:01:44
CMCC-4G                           6     2014-11-20/11:14:13
X+Z_007                           1     2014-11-20/11:20:15
tntjoyo                           1     2014-11-20/11:18:42
-------------------------------------------------------------------------------
Total: 4, printed: 4

**Table 2** Description of the **display wlan ids rogue-history ssid** command output
Item	Description
SSID	SSID of the detected device.
#Dev	Number of devices that use the SSID.
Last detected time	Last time at which the device using the SSID is detected.

# Display historical records of an AP or client with a specified MAC address.

<HUAWEI> display wlan ids rogue-history mac-address 00e0-fc03-0206
-------------------------------------------------------------------
 MAC address                           : 00e0-fc03-0206
 SSID                                  : wlan
 Type                                  : rogue ap
 Authentication                        : 802.1x
 Last detected time                    : 2012-10-25/09:22:29
-------------------------------------------------------------------

**Table 3** Description of the **display wlan ids rogue-history mac-address** command output
Item	Description
MAC address	MAC address of the detected device.
Type	Type of the detected device.
SSID	SSID of an extended service set (ESS).
Authentication	Authentication mode of the detected device.
Last detected time	Last time when the device is detected.