Motorola Wing 5 Manual
Here you can view all the pages of manual Motorola Wing 5 Manual. The Motorola manuals for Wireless are available online for free. You can easily download all the documents as PDF.
Page 1011
![Page 1011
WIPS-POLICY 22 - 7
• event enable-all-events
• event excessive [80211-replay-check-failure|aggressive-scanning|
auth-server-failures|decryption-failures|dos-assoc-or-auth-flood|
dos-eapol-start-storm |dos-unicast-deauth-or-disassoc|eap-flood|eap-nak-flood|
frames-from-unassoc-station] {filter-ageout []|threshold-client []|
threshold-radio []}
wellenreiter Tracks Wellenreiter events
filter-ageout The following are common to all of the above client anomaly events:
Optional. Configures the filter...](http://img.usermanuals.tech/thumb/52/100713/w300_wing-5-manual-1509563222_d-1010.png "Page 1011
WIPS-POLICY 22 - 7
• event enable-all-events
• event excessive [80211-replay-check-failure|aggressive-scanning|
auth-server-failures|decryption-failures|dos-assoc-or-auth-flood|
dos-eapol-start-storm |dos-unicast-deauth-or-disassoc|eap-flood|eap-nak-flood|
frames-from-unassoc-station] {filter-ageout []|threshold-client []|
threshold-radio []}
wellenreiter Tracks Wellenreiter events
filter-ageout The following are common to all of the above client anomaly events:
Optional. Configures the filter...")
WIPS-POLICY 22 - 7
• event enable-all-events
• event excessive [80211-replay-check-failure|aggressive-scanning|
auth-server-failures|decryption-failures|dos-assoc-or-auth-flood|
dos-eapol-start-storm |dos-unicast-deauth-or-disassoc|eap-flood|eap-nak-flood|
frames-from-unassoc-station] {filter-ageout []|threshold-client []|
threshold-radio []}
wellenreiter Tracks Wellenreiter events
filter-ageout The following are common to all of the above client anomaly events:
Optional. Configures the filter...
Page 1012
22 - 8 WiNG CLI Reference Guide Examples rfs7000-37FABE(config-wips-policy-test)#event excessive 80211-replay-check-failure filter-ageout 9 threshold-client 8 threshold-radio 99 rfs7000-37FABE(config-wips-policy-test)#event client-anomaly wellenreiter filter- ageout 99 rfs7000-37FABE(config-wips-policy-test)#show context wips-policy test event client-anomaly wellenreiter filter-ageout 99 event excessive 80211-replay-check-failure threshold-client 8 threshold-radio 99 filter-ageout 9...
Page 1013
WIPS-POLICY 22 - 9 22.1.4 history-throttle-duration wips-policy Configures the duration event duplicates are omitted from the event history Supported in the following platforms: AP300 AP621 AP650 AP6511 AP6521 AP6532 AP71XX RFS4000 RFS6000 RFS7000 NX9000 NX9500 Syntax history-throttle-duration Parameters • history-throttle-duration Examples rfs7000-37FABE(config-wips-policy-test)#history-throttle-duration 77 rfs7000-37FABE(config-wips-policy-test)#show context wips-policy test...
Page 1014
![Page 1014
22 - 10 WiNG CLI Reference Guide
22.1.5 no
wips-policy
Negates a command or resets configured settings to their default. When used in the config WIPS policy mode, the no
command negates or resets filters and threshold values.
Supported in the following platforms:
AP300
AP621
AP650
AP6511
AP6521
AP6532
AP71XX
RFS4000
RFS6000
RFS7000
NX9000
NX9500
Syntax
no [ap-detection|enable|event|history-throttle-duration|signature|use]
no [enable|history-throttle-duration]
no ap-detection...](http://img.usermanuals.tech/thumb/52/100713/w300_wing-5-manual-1509563222_d-1013.png "Page 1014
22 - 10 WiNG CLI Reference Guide
22.1.5 no
wips-policy
Negates a command or resets configured settings to their default. When used in the config WIPS policy mode, the no
command negates or resets filters and threshold values.
Supported in the following platforms:
AP300
AP621
AP650
AP6511
AP6521
AP6532
AP71XX
RFS4000
RFS6000
RFS7000
NX9000
NX9500
Syntax
no [ap-detection|enable|event|history-throttle-duration|signature|use]
no [enable|history-throttle-duration]
no ap-detection...")
22 - 10 WiNG CLI Reference Guide 22.1.5 no wips-policy Negates a command or resets configured settings to their default. When used in the config WIPS policy mode, the no command negates or resets filters and threshold values. Supported in the following platforms: AP300 AP621 AP650 AP6511 AP6521 AP6532 AP71XX RFS4000 RFS6000 RFS7000 NX9000 NX9500 Syntax no [ap-detection|enable|event|history-throttle-duration|signature|use] no [enable|history-throttle-duration] no ap-detection...
Page 1015
![Page 1015
WIPS-POLICY 22 - 11
• no ap-detection [ageout|wait-time] []
• no event ap-anomaly [ad-hoc-violation|airjack|ap-ssid-broadcast-in-beacon|
asleap|impersonation-attack|transmitting-device-using-invalid-mac|wireless-bridge]
• no event client-anomaly [crackable-wep-iv-key-used|dos-broadcast-deauth|
fuzzing-all-zero-macs|fuzzing-invalid-frame-type|fuzzing-invalid-mgmt-frames|
fuzzing-invalid-seq-num|identical-src-and-dest-addr|invalid-8021x-frames|...](http://img.usermanuals.tech/thumb/52/100713/w300_wing-5-manual-1509563222_d-1014.png "Page 1015
WIPS-POLICY 22 - 11
• no ap-detection [ageout|wait-time] []
• no event ap-anomaly [ad-hoc-violation|airjack|ap-ssid-broadcast-in-beacon|
asleap|impersonation-attack|transmitting-device-using-invalid-mac|wireless-bridge]
• no event client-anomaly [crackable-wep-iv-key-used|dos-broadcast-deauth|
fuzzing-all-zero-macs|fuzzing-invalid-frame-type|fuzzing-invalid-mgmt-frames|
fuzzing-invalid-seq-num|identical-src-and-dest-addr|invalid-8021x-frames|...")
WIPS-POLICY 22 - 11 • no ap-detection [ageout|wait-time] [] • no event ap-anomaly [ad-hoc-violation|airjack|ap-ssid-broadcast-in-beacon| asleap|impersonation-attack|transmitting-device-using-invalid-mac|wireless-bridge] • no event client-anomaly [crackable-wep-iv-key-used|dos-broadcast-deauth| fuzzing-all-zero-macs|fuzzing-invalid-frame-type|fuzzing-invalid-mgmt-frames| fuzzing-invalid-seq-num|identical-src-and-dest-addr|invalid-8021x-frames|...
Page 1016
![Page 1016
22 - 12 WiNG CLI Reference Guide
• no event excessive [80211-replay-check-failure|aggressive-scanning|
auth-server-failures|decryption-failures|dos-assoc-or-auth-flood|
dos-eapol-start-storm |dos-unicast-deauth-or-disassoc|eap-flood|eap-nak-flood|
frames-from-unassoc-station] {filter-ageout []|
threshold-client []|threshold-radio []}
• no signature
tkip-mic-counter-measures Disables the tracking of TKIP MIC counter measures caused by a client
wellenreiter Disables Wellenreiter event tracking...](http://img.usermanuals.tech/thumb/52/100713/w300_wing-5-manual-1509563222_d-1015.png "Page 1016
22 - 12 WiNG CLI Reference Guide
• no event excessive [80211-replay-check-failure|aggressive-scanning|
auth-server-failures|decryption-failures|dos-assoc-or-auth-flood|
dos-eapol-start-storm |dos-unicast-deauth-or-disassoc|eap-flood|eap-nak-flood|
frames-from-unassoc-station] {filter-ageout []|
threshold-client []|threshold-radio []}
• no signature
tkip-mic-counter-measures Disables the tracking of TKIP MIC counter measures caused by a client
wellenreiter Disables Wellenreiter event tracking...")
22 - 12 WiNG CLI Reference Guide
• no event excessive [80211-replay-check-failure|aggressive-scanning|
auth-server-failures|decryption-failures|dos-assoc-or-auth-flood|
dos-eapol-start-storm |dos-unicast-deauth-or-disassoc|eap-flood|eap-nak-flood|
frames-from-unassoc-station] {filter-ageout []|
threshold-client []|threshold-radio []}
• no signature
tkip-mic-counter-measures Disables the tracking of TKIP MIC counter measures caused by a client
wellenreiter Disables Wellenreiter event tracking...
Page 1017
WIPS-POLICY 22 - 13 • no use device-categorization Usage Guidelines The no command negates any command associated with it. Wherever required, use the same parameters associated with the command getting negated. Examples rfs7000-37FABE(config-wips-policy-test)#show context wips-policy test history-throttle-duration 3000 event client-anomaly wellenreiter filter-ageout 99 event excessive 80211-replay-check-failure threshold-client 8 threshold-radio 99 filter-ageout 9 ap-detection-ageout 50...
Page 1018
22 - 14 WiNG CLI Reference Guide 22.1.6 signature wips-policy Attack and intrusion patterns are identified and configured as signatures in a WIPS policy. The WIPS policy compares packets in the network with pre configured signatures to identify threats. When a threat is identified, the WIPS policy takes adequate actions. signatureConfigures a WIPS policy signature signature mode commandsSummarizes the signature mode commands
Page 1019
WIPS-POLICY 22 - 15 22.1.6.1 signature signature Configures a WIPS policy signature Supported in the following platforms: AP300 AP621 AP650 AP6511 AP6521 AP6532 AP71XX RFS4000 RFS6000 RFS7000 NX9000 NX9500 Syntax signature Parameters • signature Examples rfs7000-37FABE(config-wips-policy-test)#signature test rfs7000-37FABE(config-test-signature-test)# rfs7000-37FABE(config-test-signature-test)#show context signature test rfs7000-37FABE(config-test-signature-test)# Related Commands...
Page 1020
22 - 16 WiNG CLI Reference Guide 22.1.6.2 signature mode commands signature Table 22.2 summarizes signature commands Table 22.2signature-mode commands Commands Description Reference bssidConfigures the BSSID MAC addresspage 22-17 dst-macConfigures the destination MAC addresspage 22-18 filter-ageoutConfigures the filter ageout intervalpage 22-19 frame-typeConfigures the frame type used for matchingpage 22-20 modeEnables or disables the signature modepage 22-22 payloadConfigures payload settingspage...
All Motorola manuals