Dell PowerConnect W-Airwave W-Airwave 7.2 Configuration Guide - Page 82

client from the Dell PowerConnect W system. When a client is blacklisted in the Dell PowerConnect W system, the client is not allowed to associate with any AP in the network for a specified amount of time. If a client is connected to the network when it is blacklisted, a de-authentication message is sent to force the client to disconnect. While blacklisted, the client cannot associate with another SSID in the network. Table 30 summarizes the predefined IDS Denial of Service profiles. These profiles are viewable with the Profiles > IDS > Denial of Service path in the navigation pane. Table 30 Predefined IDS DoS Profiles Parameter ids-dosdisabled ids-dos-lowsetting ids-dosmedium-setting ids-dos-highsetting Detect Disconnect Station Attack disabled enabled enabled Disconnect STA Detection Quiet Time 900 seconds 900 seconds 900 seconds Spoofed Deauth Blacklist disabled disabled disabled Detect AP Flood Attack disabled disabled disabled AP Flood Threshold 50 50 50 AP Flood Increase Time 3 seconds 3 seconds 3 seconds AP Flood Detection Quiet Time 900 seconds 900 seconds 900 seconds Detect EAP Rate Anomaly disabled disabled enabled EAP Rate Threshold 60 60 30 EAP Rate Time Interval 3 seconds 3 seconds 3 seconds EAP Rate Quiet Time 900 seconds 900 seconds 900 seconds Detect Rate Anomalies disabled disabled disabled Detect 802.11n 40 MHz Intolerance Setting disabled enabled enabled Client 40 MHz Intolerance Detection Quiet Time 900 seconds 900 seconds 900 seconds Rate Thresholds for Assoc Frames default default default Rate Thresholds for Disassoc default Frames default default Rate Thresholds for Deauth Frames default default default Rate Thresholds for Probe Request Frames default probe-request-response- probe-request-response- thresholds thresholds Rate Thresholds for Probe Response Frames default probe-request- probe-request-response- probe-request-response- response-thresholds thresholds thresholds default default default default enabled 900 seconds disabled disabled 50 3 seconds 900 seconds enabled 60 3 seconds 900 seconds enabled enabled 900 seconds default default default probe-request-responsethresholds Rate Thresholds for Auth Frames Perform these steps to configure or edit an IDS Denial of Service profile, and to create or edit profiles that are referenced by a DOC profile. 82 | Dell PowerConnect W Configuration Reference Dell PowerConnect W AirWave 7.2 | Configuration Guide