Intrusion Detection System (Ids) Alarms - Nortel 2350 Reference Manual

358 Managing Alarms

Intrusion Detection System (IDS) Alarms

SNMP notifications must be enabled on the WSSs.
(IDS) and Denial of Service (DoS) protection. (For more information about DoS notification, see
(DoS) Alarms" (page 360). To enable notifications on a switch, see
Notification Type
IDS/DoS notifications
For more information about IDS/DoS, see the "IDS and DoS Alerts" section in the "Rogue
Detection and Countermeasures" chapter of the
Configuration
CounterMeasureStart
CounterMeasureStop
RFDetectSpoofedMacAP
RFDetectSpoofedSSIDAP
RFDetectDoS
NN47250-102 (320666-G Version 02.01)
Table 1
Table 1: SNMP Notifications for IDS and DoS
Guide.
lists the notification types for Intrusion Detection System
"Configuring SNMP" (page
Description
Nortel WLAN Security Switch 2300 Series
Indicates that WSS Software has begun
countermeasures against a rogue AP.
Indicates that WSS Software has stopped
countermeasures against a rogue access
point.
Indicates that WSS Software has detected a
wireless packet with the source MAC
address of a Nortel AP, but without the
spoofed AP's signature (fingerprint).
Indicates that WSS Software has detected
beacon frames for a valid SSID, but sent by
a rogue AP.
Indicates that WSS Software has detected a
DoS attack other than an associate request
flood, reassociate request flood, or
disassociate request flood.
"Denial of Service
182).)