Dell PowerConnect W-7200 Series, Reference Manual

Page: 293 / 1538

Parameter Description Range Default
the incorrect channel
detect-hotspotter
Enable/disable detection of the Hotspotter attack
to lure away valid clients. — disable
hotspotter-quiet-time
Time to wait in seconds after detecting an
attempt to Use the Hotspotter tool against
clients. 60-360000
seconds 900
seconds
no
Negates any configured parameter. — —
protect-ap-impersonation
When AP impersonation is detected, both the
legitimate and impersonating AP are disabled
using a denial of service attack. — false
Usage Guidelines
A successful man-in-the-middle attack will insert an attacker into the data path between the client and the AP. In
such a position, the attacker can delete, add, or modify data, provided he has access to the encryption keys. Such an
attack also enables other attacks that can learn a client’s authentication credentials. Man-in-the-middle attacks often
rely on a number of different vulnerabilities.
Example
The following command enables detections in the impersonation profile:
(host) (config) #ids impersonation-profile floor1
(host) (IDS Impersonation Profile "floor1") #detect-beacon-wrong-channel
(host) (IDS Impersonation Profile "floor1") #detect-ap-impersonation
Command History
Version Modification
ArubaOS 3.0 Command Introduced
ArubaOS 3.4 detect-sequence-anomaly, sequence-diff, sequence-quiet-time, sequence-time-tolerance parameters
deprecated.
ArubaOS 6.0 Deprecated predefined profiles and added numerous Impersonation profile options
Deprecated Predefined Profiles
IDS Impersonation profile:
l
ids-impersonation-disabled
l
ids-impersonation-high-setting
Command Information
Platform License Command Mode
Available on all platforms Requires the RFprotect license Config mode on master controllers
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide ids impersonation-profile | 293