Ids Parameters - AudioCodes Mediant 800 User Manual

CHAPTER 72 Configuration Parameters Reference
Parameter
'Enable Last Login Message'
configure system > cli-
settings > ssh-last-
login-message
[SSHEnableLastLoginMessage]
'Max Login Attempts
configure system > cli-
settings > ssh-max-
login-attempts
[SSHMaxLoginAttempts]

IDS Parameters

The Intrusion Detection System (IDS) parameters are described in the table below.
Parameter
'Intrusion Detection System
(IDS)'
enable-ids
[EnableIDS]
'Alarm Clear Period'
alarm-clear-period
[IDSAlarmClearPeriod]
'Excluded Response Codes'
excluded-responses
[IDSExcludedResponseCode
s]
Enables message display in SSH sessions of the time and
date of the last SSH login. The SSH login message
displays the number of unsuccessful login attempts since
the last successful login.
■ [0] Disable
■ [1] Enable (default)
Note: The last SSH login information is cleared when the
device is reset.
Defines the maximum SSH login attempts allowed for
entering an incorrect password by an administrator before
the SSH session is rejected.
The valid range is 1 to 5. The default is 3.
Note: The new setting takes effect only for new
subsequent SSH connections.
Table 72-28:IDS Parameters
Enables the IDS feature.
■ [0] Disable (default)
■ [1] Enable
Defines the interval (in seconds) after which an IDS alarm is
cleared from the Active Alarms table if no thresholds are
crossed during this time. However, this "quiet" period must
be at least twice the Threshold Window value. For example,
if IDSAlarmClearPeriod is set to 20 sec and the Threshold
Window is set to 15 sec, the IDSAlarmClearPeriod
parameter is ignored and the alarm is cleared only after 30
seconds (2 x 15 sec).
The valid value is 0 to 86400. The default is 300.
Defines the SIP response codes that are excluded form the
IDS count for SIP dialog establishment failures.
The valid value is 400 through to 699. The maximum length
is 100 characters. You can configure the parameter with
multiple codes, where each code is separated by a comma
(without spaces). The default is
408,422,423,480,481,486,487,500,501,502,503,504,505,60
0.
For more information, see
to Exclude from IDS
Note:
- 1212 -
Mediant 800 Gateway & E-SBC | User's Manual
Description
Description
Configuring SIP Response Codes
on page 156.