Motorola WS5100 Series, Cli Reference Manual

Page: 440 / 492

WS5100 Series Switch CLI Reference Guide 20-22
Example
WS5100(config-wireless)*#ids anomaly-detection tkip-countermeasures
enable
WS5100(config-wireless)*#
WS5100(config-wireless)#ids detect-window 250
ex-ops {} Sets values related to the detection of excessive operations
on the RF network
• 80211-replay-fails – 802.11 replay check failure
• all – Changes for all types of excessive operations
• association-requests – 802.11 authentication and
association requests authentication-fails – Failure to
authenticate with servers (RADIUS/Kerberos)
• crypto-replay-fails – TKIP/CCMP IV replay check failure
• decryption-fails – Decryption failures
• disassociations – Disassociation and Deauthentication
frames
• eap-naks – Excessive EAP-NAKs. The threshold upper
limit for this field is 65535 (the default limit is 0)
• eap-starts – EAP (802.1x) Start frames
• probe-requests – Probe Request frames
• unassoc-frames – Frames from unassociated stations
• filter-ageout<0-86400> – Sets the number of
seconds mobile units will be filtered out
• threshold (mu|radio|switch) <0-9999> – Sets
the threshold allowed in the detection
window
mu–Uses the threshold for monitoring
on a per mobile unit basis
radio–Uses the threshold for monitoring
on a per radio basis
switch–Uses the threshold for
monitoring at the switch level