5-118
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 5 Configuring Security Solutions
Configuring IDS
3.
To see the number of attacks detected by the enabled signatures, enter this command:
show wps signature events summary
Information similar to the following appears:
Precedence Signature Name Type
# Events
---------- ------------------ ----- -----------
1
Bcast deauth
Standard
2
2
NULL probe resp 1 Standard 1
4.
To see more information on the attacks detected by a particular standard or custom signature, enter
this command:
show wps signature events
{
standard
|
custom
}
precedence#
summary
Information similar to the following appears:
Precedence....................................... 1
Signature Name................................... Bcast deauth
Type............................................. Standard
Number of active events....................... 2
Source MAC Addr Track Method Frequency No. APs Last Heard
----------------- ------------ --------- -------- ------------------------
00:01:02:03:04:01 Per Signature 4
3
Tue Dec 6 00:17:44 2005
00:01:02:03:04:01 Per Mac 6
2
Tue Dec 6 00:30:04 2005
5.
To see information on attacks that are tracked by access points on a per-signature and per-channel
basis, enter this command:
show wps signature events
{
standard
|
custom
}
precedence#
detailed per-signature
source_mac
6.
To see information on attacks that are tracked by access points on an individual-client basis (by
MAC address), enter this command:
show wps signature events
{
standard
|
custom
}
precedence#
detailed per-mac
source_mac
Information similar to the following appears:
Source MAC....................................... 00:01:02:03:04:01
Precedence....................................... 1
Signature Name................................... Bcast deauth
Type............................................. Standard
Track............................................ Per Mac
Frequency........................................ 6
Reported By
AP 1
MAC Address.............................. 00:0b:85:01:4d:80
Name..................................... Test_AP_1
Radio Type............................... 802.11bg
Channel.................................. 4
Last reported by this AP................. Tue Dec 6 00:17:49 2005
AP 2
MAC Address.............................. 00:0b:85:26:91:52
Name..................................... Test_AP_2
Radio Type............................... 802.11bg
Channel.................................. 6
Last reported by this AP................. Tue Dec 6 00:30:04 2005
