Siemens SCALANCE W1750D CLI Function Manual page 165

Parameter
protect-valid-sta
protect-windows-
bridge
rogue-containment
signature-airjack
signature-asleap
signature-
deassociation-
broadcast
signature-deauth-
broadcast
wired-containment
wired-containment-
ap-adj- mac
wired-containment-
susp-l3- rogue
wireless-
containment
<type>
SCALANCE W1750D CLI
Function Manual, 03/2019, C79000-G8976-C452-04
Description
Enables protection of valid stations. When
enabled valid stations are not allowed to
connect to an invalid AP.
Enables protection of a windows station
bridging
Controls Rogue AIPs. When rogue APs are
detected, they are not automatically disa-
bled.
This option automatically shuts down rogue
APs. When this option is enabled, clients
attempting to associate to an AP classified
as a rogue are disconnected through a de-
nial of service attack.
Enables signature matching for the AirJack
frame type.
Enables signature matching for the ASLEAP
frame type.
Configures signature matching for the deas-
sociation broadcast frame type.
Configures signature matching for the
deauth broadcast frame type.
Controls Wired attacks.
Enables a wired containment to Rogue APs
whose wired interface MAC address is offset
by one from its BSSID.
Enables the user to identify and contain an
AP with a preset wired MAC address that is
different from the BSSID of the AP if the
MAC address that the AP provides to wire-
less clients as the Gateway MAC is offset by
one character from its wired MAC address.
NOTE:
Enable this feature only when the specific
containment is needed, to avoid a false
alarm.
Enable wireless containment including Tar-
pit Shielding.
Tarpit shielding works by steering a client to
a tarpit so that the client associates with it
instead of the AP that is being contained.
deauth-only— Enables Containment using
deauthentication only.
none— Disables wireless containment.
tarpit-all-sta—Enables wireless containment
by tarpit of all stations.
tarpit-non-valid-sta— Enables wireless con-
tainment by tarpit of non-valid clients
CLI Commands
Range Default
— —
— —
— —
— —
— —
— —
— —
— —
— —
— —
deauth- only, deauth-only
none, tarpit-
all-sta, tarpit-
non- valid-sta
4.9 I
165