Dell PowerConnect W Clearpass 100 Software Betriebsanweisung PDF herunterladen (Seite 206)

206206 | Intrusion Detection

Dell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide

Containment Methods

You can enable wired and wireless containments to prevent unauthorized stations from connecting to your AOS-W

Instant network.

AOS-W Instant supports the following types of containment mechanisms:

l Wired containment— When enabled, Alcatel-Lucent Access Points generate ARP packets on the wired network

to contain wireless attacks.

l Wireless containment— When enabled, the system attempts to disconnect all clients that are connected or

attempting to connect to the identified Access Point.

n None— Disables all the containment mechanisms.

n Deauthenticate only— With deauthentication containment, the Access Point or client is contained by

disrupting the client association on the wireless interface.

n Tarpit containment— With Tarpit containment, the Access Point is contained by luring clients that are

attempting to associate with it to a tarpit. The tarpit can be on the same channel or a different channel as the

Access Point being contained.

Figure 69 Containment Methods

Configuring IDSUsing CLI

To configure IDS using CLI:

(Instant Access Point)(config)# ids

(Instant Access Point)(IDS)# infrastructure-detection-level <type>

(Instant Access Point)(IDS)# client-detection-level <type>

(Instant Access Point)(IDS)# infrastructure-protection-level <type>

(Instant Access Point)(IDS)# client-protection-level <type>

1 2 ... 201 202 203 204 205 206 207 208 209 210 211 ... 295 296

Keine Kommentare

Dell PowerConnect W Clearpass 100 Software Betriebsanweisung Seite 206