Aruba Networks AirOS v2.3, User Manual

Page: 171 / 254

Intrusion Detection 161
Chapter 10
z
Frame Type: This refers to the type of 802.11 frame. For each type of frame further
details can be specified to filter and detect only the required frames. It can be one of the
following:
z
Association
z
Auth
z
Control
z
Data
z
Deauth
z
Deassoc
z
Management
z
Probe-request
z
Probe-response
z
Beacon.
z
Payload: This looks for a pattern at a fixed offset in the payload of a 802.11 frame. The
administrator can configure the pattern and the offset where the pattern is expected to be
found in the frame.
z
Sequence Number: This refers to the sequence number of the frame.
z
Source MAC address: This refers to the source MAC address of the 802.11 frame.
5 After completing configuring the rule to be added, click Add to add the rule to the list of
rule. In the example shown, a rule that matches the BSSID to the value 00:00:00:00:00:0a
has been added.