Motorola WS-2000-SME-WW CLI Guide - Page 288
<type>, <threshold>, <filter-ageout>
View all Motorola WS-2000-SME-WW manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 288 highlights
3-252 WS2000 Wireless Switch System Reference Guide excess-op [threshold|filterageout] Sets the threshold of events allowed in the detection window per MU. • threshold [mu|radio|switch] - Sets the threshold values for mu, radio, or switch. • is the violation type and can be one of: • all - all types of excessive operations • probe-req - Probe Request frames • auth-assoc-req - 802.11 Authentication and Association Request • deauth-disassoc-req - Disassociation and Deauthentication frames • auth-fails - Failures reported by Authentication servers • crypto-replay-fails - TKIP/CCMP IV replay check failure • 80211-replay-fails - 802.11 replay check failure • decrypt-fails - decryption failures • unassoc-frames - frames from unassociated stations • eap-starts - EAP (802.1x) Start frames • (0-65535) is the threshold value in seconds, 0 disables this option • filter-ageout - Sets the number of seconds a mobile unit is filtered out. • is the violation type and can be one of: • all - all the anomalies. • null-dst - NULL destination MAC anomaly • same-src-dst - Same source and destination IP anomaly • mcas-src - Multicast source MAC anomaly • weak-wep-iv - Weak WEP initialization vector anomaly • tkip-cntr-meas - TKIP Countermeasures anomaly • invalid-frame-len - Invalid frame length anomaly • (0-86400) is the ageout value in seconds. Default is 60 seconds. 0 disables this option. Example admin(network.wids)> set mode enable admin(network.wids)> set detect-window 25 admin(network.wids)> set anomaly-detect mode all enable admin(network.wids)> set anomaly-detect filter-ageout all 120 admin(network.wids)> set excess-op threshold mu all 80 admin(network.wids)> set excess-op filter-ageout all 80 admin(network.wids)> show wids WIDS feature is Detect Window : Enabled : 10 (Secs) Excessive Operations :: (Secs) probe-req : auth-assoc-req : deauth-disassoc-req : auth-fails : Threshold (0 == disabled) mu radio switch 80 0 0 80 0 0 80 0 0 80 0 0 Filter-Ageout 80 80 80 80