Dell W-7030 AOS 6.4.x CLI Reference Guide - Page 433

Parameter wired-containment-ap-adj-mac Description Enable/disable wired containment of MACs offset by one from APs BSSID. Range Default true false false wired-containment-susp-l3-rogue The basic wired containment feature true enabled using the wired-containment command contains layer-3 APs whose wired interface MAC addresses are either the same as (or one character off from) their BSSIDs. This feature can also identify and contain an AP with a preset wired MAC address that is completely different from the AP's BSSID if the MAC address that the AP provides to wireless clients as the 'gateway MAC' is offset by one character from its wired MAC address. NOTE: This feature requires that the following wired-containment parameter in the ids general-profile is also enabled, and that the confidence level of the suspected rogue exceeds the level configured by the suspect-rogue-containment and suspectrogue-conf-level parameters in the ids unauthorized-device-profile. wireless-containment deauth-only none tarpit-all-sta tarpit-non-valid-sta Enable wireless containment including - Tarpit Shielding. Tarpit shielding works by steering a client to a tarpit so that the client associates with it instead of the AP that is being contained. deauth-only-Containment using deauthentication only. none-Disable wireless containment. tarpit-all-sta-Wireless containment by tarpit of all stations. tarpit-non-valid-sta-Wireless containment by tarpit of non-valid clients. false deaut honly wireless-containment-debug Enable/disable debug of containment from the wireless side. Note: Enabling this debug option will cause containment to not function properly. true false false Usage Guidelines This command configures general IDS profile attributes. Example The following command enables containment in the general IDS profile: (host) (config) #ids general-profile floor7 (host) (IDS General Profile "floor7") #wired-containment (host) (IDS General Profile "floor7") #wireless-containment tarpit-all-sta 433 | ids general-profile Dell Networking W-Series ArubaOS 6.4.x | User Guide