Aruba Networks AirOS v2.3, User Manual

Page: 167 / 254

Intrusion Detection 157
Chapter 10
1 To configure AP impersonation detection, click the
AP Impersonation
.
The following table gives a brief description of the fields in this section.
Configuring Signature Detection
Navigate to the
Configuration > WLAN Intrusion Detection > Signatures
page on the
WebUI on the Master switch.
3. Sequence Number Checking
Time Tolerance (msec)
The time interval in which sequence
numbers must exceed the sequence
number difference threshold in order for
an alarm to be triggered.
4. Sequence Number Checking
Quiet Time (secs)
After an alarm has been triggered, the
amount of time that must pass before
another identical alarm may be triggered.
Field Description
1. Enable AP Impersonation
Detection
Enables detection of AP impersonation.
2. Enable AP Impersonation
Protection
When AP impersonation is detected, both
the legitimate and the impersonating AP
will be disabled using a denial of service
attack.
3. Beacon Rate Increment
Threshold
The percentage increase in beacon rate
that will trigger an AP impersonation
event.