Motorola Wing 5 Manual

ADVANCED-WIPS-POLICY 10 - 11
stp-detection|unauthorized-bridge|windows-zero-config-memory-leak|
wlan-jack-attack-detected]
• no server-listen-port
• no terminate 
event [accidental-association|
crackable-wep-iv-used|
dos-cts-flood|
dos-deauthentication-detection|
dos-disassociation-detection|
dos-eap-failure-spoof|
dos-eapol-logoff-storm|
dos-rts-flood|
essid-jack-attack-detected|
fake-dhcp-server-detected|
fata-jack-detected|
id-theft-eapol-success-spoof-
detected|
id-theft-out-of-sequence|...

10 - 12 WiNG CLI Reference Guide
• no use device-configuration
Example
rfs7000-37FABE(config-advanced-wips-policy-test)#no event accidental-association 
trigger-against
rfs7000-37FABE(config-advanced-wips-policy-test)#no server-listen-port
rfs7000-37FABE(config-advanced-wips-policy-test)#no use device-categorization
rfs7000-37FABE(config-advanced-wips-policy-test)#no terminate 11-22-33-44-55-66
Related Commands
use device-categorization  Removes the current device categorization list from the advanced...

ADVANCED-WIPS-POLICY 10 - 13
10.1.3 server-listen-port
advanced-wips-policy
Defines the local WIPS server’s listening port, where WIPS sensors connect to the local WIPS server
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
server-listen-port 
Parameters
• server-listen-port 
Example
rfs7000-37FABE(config-advanced-wips-policy-test)#server-listen-port 1009
Related Commands
server-listen-port  Select a port from 0...

10 - 14 WiNG CLI Reference Guide
10.1.4 terminate
advanced-wips-policy
Adds a device to a device termination list. Devices on this list cannot access the wireless controller managed network. 
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000
 RFS6000
 RFS7000
 NX9000
 NX9500
Syntax
terminate 
Parameters
• terminate 
Example
rfs7000-37FABE(config-advanced-wips-policy-test)#terminate 00-40-96-B0-BA-2D
Related Commands
terminate  Adds a device MAC address...

ADVANCED-WIPS-POLICY 10 - 15
10.1.5 use
advanced-wips-policy
Uses an existing device categorization list with the advanced WIPS policy. A device configuration list must exist before it 
can be used with the advanced WIPS policy.
A device categorization list categorizes a device, either an AP or a wireless client, as sanctioned or neighboring based on 
its MAC address or access point SSID.
For more information on creating a device categorization list, see Chapter 4, GLOBAL CONFIGURATION COMMANDS,...

10 - 16 WiNG CLI Reference Guide
Related Commands
noResets values or disables command
device-categorizationCreates a device categorization list 

CHAPTER 11 ASSOCIATION-ACL-POLICY
This chapter summarizes the association ACL policy commands within the CLI structure.
Use the (config) instance to configure association ACL policy related configuration commands. To navigate to the 
association-acl-policy instance, use the following commands:
RFSSwitch(config)#association-acl-policy  
rfs7000-37FABE(config)#association-acl-policy test
rfs7000-37FABE(config-assoc-acl-test)#
rfs7000-37FABE(config-assoc-acl-test)#?
Association ACL Mode commands:
  deny...

11 - 2 WiNG CLI Reference Guide
11.1 association-acl-policy
Table 11.1 summarizes association ACL policy commands
Ta b l e  1 1 . 1association-acl-policy commands
Command Description Reference
denySpecifies a range of denied MAC addresses page 11-3
noNegates a command or sets its defaultpage 11-5
permitSpecifies a range of permitted MAC addresses page 11-7
clrscrClears the display screenpage 5-3
commitCommits (saves) changes made in the current sessionpage 5-4
doRuns commands from EXEC modepage 4-66...

ASSOCIATION-ACL-POLICY 11 - 3
11.1.1 deny
association-acl-policy
Identifies those devices denied access to the wireless controller managed network. Devices are identified by their MAC 
address. A single MAC address or a range of MAC addresses can be specified to deny access. This command also sets the 
precedence on how deny list rules are applied. Up to a thousand (1000) deny rules can be defined.
Supported in the following platforms:
 AP300
 AP621
 AP650
 AP6511
 AP6521
 AP6532
 AP71XX
 RFS4000...

11 - 4 WiNG CLI Reference Guide
Examples
rfs7000-37FABE(config-assoc-acl-test)#show context
association-acl-policy test
rfs7000-37FABE(config-assoc-acl-test)#deny 11-22-33-44-55-01 11-22-33-44-55-FF 
precedence 150
rfs7000-37FABE(config-assoc-acl-test)#deny 11-22-33-44-56-01 11-22-33-44-56-01 
precedence 160
rfs7000-37FABE(config-assoc-acl-test)#show context
association-acl-policy test
 deny 11-22-33-44-55-01 11-22-33-44-55-FF precedence 150
 deny 11-22-33-44-56-01 11-22-33-44-56-01 precedence 160...