Avaya WLAN 8100 Series Reference page 104

ACLI reference for Wireless LAN (WLAN) 8100
3. Use the following commands to enable WIPS mitigation.
4. Use the following commands to configure Known APs.
104 Avaya WLAN 8100 CLI Reference
threshold Set threshold for calculating rate
<cr>
Use the following command to disable detection of a specific client threat, for
example the assoc-unknown-ap threat.
WCP8180(config-security)#no wids client threat assoc-unknown-ap
Use the following command to disable detection of all client threats.
WCP8180(config-security)#no wids client threat
Use the following command to set the default for a specific client threat. Detection
of a threat is enabled by default.
For example, the following command sets the default for the auth-req-rate
threat, which is to enable its detection.
WCP8180(config-security)#default wids client threat auth-req-rate
To set the defaults for all threats, enter:
WCP8180(config-security)#default wids client threat
WCP8180(config-security)#wips mitigation ?
ap-threat Enable AP Threat Mitigation
client-threat Enable Client Threat Mitigation
Use one of the following commands to set the defaults for AP/client threat
mitigation.
WCP8180(config-security)#default wips mitigation
WCP8180(config-security)#default wips mitigation ap-threat
WCP8180(config-security)#default wips mitigation client-threat
Use the following commands to disable WIPS mitigation.
WCP8180(config-security)#no wips mitigation ap-threat
WCP8180(config-security)#no wips mitigation client-threat
An AP that is not managed by the WLAN switch, but is a known AP that is not a
threat, can be configured as a Known AP (by adding the AP to the Known AP table).
That way during an AP scan, Known APs can clearly be distinguished from Rogue
APs.
In the following example, 00:88:87:99:77:66 is the MAC address of a Known
AP.
WCP8180(config-security)#wids known-ap 00:88:87:99:77:66 ?
channel Set the expected channel number
security Set the expected security mode
ssid Set the expected SSID
type Set the type of the known AP
wds-mode Set the expected WDS mode
wired-mode Set the expected wired network mode
Use the following command to configure the channel.
WCP8180(config-security)#wids known-ap 00:88:99:66:66:88 channel ?
<0-216> expected channel number, 0 for any channel
Comments? infodev@avaya.com
August 2013