Dell PowerConnect W-7200 Series, Reference Manual

Page: 308 / 1538

308 | ids unauthorized-device-profile Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Parameter Description Range Default
protect-windows-bridge Enable/disable protection of a windows station
bridging — disabled
protect-wireless-hosted-network
When you enable the wireless hosted network
protection feature, the controller enforces
containment on a wireless hosted network by
launching a denial of service attack to disrupt
associations between a Windows 7 software-
enabled Access Point (softAP) and a client, and
disrupt associations between the client that is
hosting the softAP and any access point to which
the host connects.
When a wireless hosted network triggers this
feature, wireless hosted network protection sends
the Wireless Hosted Network Containment and
Host of Wireless Network Containment warning
level security log messages, and the
wlsxWirelessHostedNetworkContainment and
wlsxHostOfWirelessNetworkContainment SNMP
traps.
NOTE: The existing generic containment SNMP
traps and log messages will also be sent when
Wireless Hosted Network Containment or Host of
Wireless Network Containment is enforced. — disabled
require-wpa
When enabled (true), any valid AP that is not using
WPA encryption is flagged as misconfigured. — false
rogue-containment Rogue APs can be detected (see classification) but
are not automatically disabled. This option
automatically shuts down rogue APs. When this
option is enabled (true), clients attempting to
associate to an AP classified as a rogue are
disconnected through a denial of service attack. — false
suspect-rogue-conf-level
Confidence level of suspected Rogue AP to trigger
containment.
When an AP is classified as a suspected rogue AP,
it is assigned a 50% confidence level. If multiple
APs trigger the same events that classify the AP as
a suspected rogue, the confidence level increases
by 5% up to 95%.
In combination with suspected rogue containment,
this option configures the threshold by which
containment should occur. Suspected rogue
containment occurs only when the configured
confidence level is met. 50-
100% 60%
suspect-rogue-containment
Suspected rogue APs are treated as interfering
APs, thereby the controller attempts to reclassify
them as rogue APs. Suspected rogue APs are not
automatically contained. In combination with the
configured confidence level (see suspect-rogue-
conf-level), this option contains the suspected
rogue APs. — false
unencrypted-valid-client-
quiet-time Time to wait, in seconds, after detecting an
unencrypted valid client after which the check can
be resumed. 60-
360000
sec- 900
seconds