Client-Security Intrusion-Protection Enable - HPE FlexNetwork MSR Series Command Reference Manual

Default
The intrusion protection action is temporary-block.
Views
Service template view
Predefined user roles
network-admin
Parameters
service-stop: Stops the BSS where an illegal frame is received until the BSS is enabled manually on
the radio interface.
temporary-block: Adds the source MAC address of an illegal frame to the blocked MAC address list
for a period. To set the period, use the client-security intrusion-protection timer
temporary-block command.
temporary-service-stop: Stops the BSS where an illegal frame is received for a period. To set the
period, use the client-security intrusion-protection timer temporary-service-stop command.
Usage guidelines
This command is configurable when the service template is disabled, and it takes effect after the
service template is enabled.
For this command to take effect, you must also use the client-security intrusion-protection
enable command to enable the intrusion protection feature.
Examples
# Configure the device to stop the BSS where intrusion protection detects illegal frames for service
template service1.
<Sysname> system-view
[Sysname] wlan service-template service1
[Sysname-wlan-st-service1] client-security intrusion-protection enable
[Sysname-wlan-st-service1] client-security intrusion-protection action service-stop
Related commands

client-security intrusion-protection enable

client-security intrusion-protection timer temporary-block
client-security intrusion-protection timer temporary-service-stop
client-security intrusion-protection enable
Use client-security intrusion-protection enable to enable the intrusion protection feature.
Use undo client-security intrusion-protection enable to disable the intrusion protection feature.
Syntax
client-security intrusion-protection enable
undo client-security intrusion-protection enable
Default
The intrusion protection feature is disabled.
Views
Service template view
84