Table 363: Wids Client Configuration - D-Link DWL-8600AP User Manual

D-Link UWS User Manual
Table 363 describes the fields on the WIDS Client Configuration page.
Field
Not Present in OUI Database
Test
Known Client Database Test
Configured Authentication
Rate Test
Configured Probe Requests
Rate Test
Configured De-Authentication
Requests Rate Test
Maximum Authentication
Failures Test
Authentication with Unknown
AP Test
Client Threat Mitigation
Known Client Database Lookup
Method
Known Client Database
RADIUS Server Name
Rogue Detected Trap Interval Specify the interval, in seconds, between transmissions of the SNMP trap
De-Authentication Requests
Threshold Interval
De-Authentication Requests
Threshold Value
Authentication Requests
Threshold Interval
Authentication Requests
Threshold Value
D-Link
Oct. 2015

Table 363: WIDS Client Configuration

Description
This test checks whether the MAC address of the client is from a registered
manufacturer identified in the OUI database.
This test checks whether the client, which is identified by its MAC address, is
listed in the Known Client Database and is allowed access to the AP either
through the Authentication Action of Grant or through the White List global
action.
If the client is in the Known Client Database and has an action of Deny, or if
the action is Global Action and it is globally set to Black List, the client fails
this test.
This test checks whether the client has exceeded the configured rate for
transmitting 802.11 authentication requests.
This test checks whether the client has exceeded the configured rate for
transmitting probe requests.
This test checks whether the client has exceeded the configured rate for
transmitting de-authentication requests.
This test checks whether the client has exceeded the maximum number of
failed authentications.
This test checks whether a client in the Known Client database is
authenticated with an unknown AP.
Select enable to send de-authentication messages to clients that are in the
Known Clients database but are associated with unknown APs. The
Authentication with Unknown AP Test must also be enabled in order for the
mitigation to take place.
Select disable to allow clients in the Known Clients database to remain
authenticated with an unknown AP.
When the switch detects a client on the network it performs a lookup in the
Known Client database.
Specify whether the switch should use the local or RADIUS database for these
lookups.
If the known client database lookup method is RADIUS then this field
specifies the RADIUS server name.
telling the administrator that rogue APs are present in the RF Scan database.
If you set the value to 0, the trap is never sent.
Specify the number of seconds an AP should spend counting the de-
authentication messages sent by wireless clients.
If switch receives more than specified messages during the threshold interval
the test triggers.
Specify the number of seconds an AP should spend counting the
authentication messages sent by wireless clients.
If switch receives more than specified messages during the threshold interval
the test triggers.
Configuring Advanced Settings
Unified Wired and Wireless Access System
Page 635