1.
If the source MAC address does not match any entry in the white list, the frame is dropped. If
there is a match, the frame is considered valid and is processed further.
2.
If no white list entries exist, the static and dynamic blacklists are searched.
3.
If the source MAC address matches an entry in any of the two lists, the frame is dropped.
4.
If there is no match, or no blacklist entries exist, the frame is considered valid and is processed
further.
Figure 25 Frame filtering
If client 1 is present in the backlist, it cannot associate with the fat AP. If it is only in the white list, it can
get associated with the fat AP.
Hardware compatibility with WLAN
WLAN IDS is not available on the following routers:
•
MSR 2600.
•
MSR 30-11.
•
MSR 30-11E.
•
MSR 30-11F.
•
MSR3600-51F.
WLAN IDS configuration task list
Task
Configuring AP operating mode
Configuring attack detection
Configuring blacklist and whitelist
Configuring attack
detection.
Displaying and maintaining attack
detection.
57
Description
Required.
Optional.
Optional.