Cisco Cisco Access Registrar 4.2 Specifikace stáhnout pdf (Strana 252)

100

101

5-68

Cisco Wireless LAN Controller Configuration Guide

OL-13826-01

Chapter 5 Configuring Security Solutions

Configuring IDS

This page shows the IP address and MAC address of each shunned client, the length of time that the

client’s data packets should be blocked by the controller as requested by the IDS sensor, and the IP

address of the IDS sensor that discovered the client.

Step 2 Click Re-sync to purge and reset the list as desired.

Using the CLI to View Shunned Clients

Follow these steps to view the list of clients that the IDS sensors have identified to be shunned using the

controller CLI.

Step 1 To view the list of clients to be shunned, enter this command:

show wps shun-list

Step 2 To force the controller to sync up with other controllers in the mobility group for the shun list, enter this

command:

config wps shun-list re-sync

Configuring IDS Signatures

You can configure IDS signatures, or bit-pattern matching rules used to identify various types of attacks

in incoming 802.11 packets, on the controller. When the signatures are enabled, the access points joined

to the controller perform signature analysis on the received 802.11 data or management frames and

report any discrepancies to the controller.

A standard signature file exists on the controller by default. You can upload this signature file from the

controller, or you can create a custom signature file and download it to the controller or modify the

standard signature file to create a custom signature. You can configure signatures through either the GUI

or the CLI.

Using the GUI to Configure IDS Signatures

You must follow these instructions to configure signatures using the controller GUI:

• Uploading or downloading IDS signatures, page 5-69

• Enabling or disabling IDS signatures, page 5-70

• Viewing IDS signature events, page 5-72

1 2 ... 247 248 249 250 251 252 253 254 255 256 257 ... 635 636

Komentáře k této Příručce

Žádné komentáře

Cisco Cisco Access Registrar 4.2 Specifikace Strana 252

Komentáře k této Příručce