Samsung WEC8500 Operation Manual page 285

2600-00FK1RGA4 Ver.
8.2.2.2 Configuring the malicious AP classification policy
To configure the malicious type unauthorized AP classification policy, execute the
command as follows:
Configuration using CLI
1) Go to configure  wids  rogue configuration mode of CLI.
WEC8500# configure terminal
WEC8500/configure# wids
WEC8500/configure/wids# rogue
WEC8500/configure/wids/rogue#
2) Configure the malicious type unauthorized AP policy.

add-classification-rule-malicious [RULE_NAME] enable [PRIORITY]
[MATCH_TYPE] [MIN_RSSI] [MIN_DURATION] [NO_OF_MIN_ASSOC
CLIENTS] [ENCRYPTION] [SSID_TYPE] [SSID]
Parameter
RULE_NAME
PRIORITY
MATCH_TYPE
MIN_RSSI
MIN_DURATION
NO_OF_MIN_ASSOC
CLIENTS
ENCRYPTION
SSID TYPE
SSID
© SAMSUNG Electronics Co., Ltd.
3.0
Classification policy name
Rule priority number
Enter either match-all or match-any.
- match-all: Classifies as a malicious unauthorized AP when the
detection criteria entered thereafter are all satisfied.
- match-any: Classifies as a malicious unauthorized AP when any one
of the detection criteria entered thereafter is satisfied.
Minimum RSSI. When the RSSI value is higher than this value, it is
classified as a malicious unauthorized AP.
Minimum lasting time (unit: s). When the signal lasting time is higher
than this value, it is classified as a malicious unauthorized AP.
Minimum number of connected terminals When the number of
connected terminals is higher than this value, it is classified as a
malicious unauthorized AP.
Whether to use encryption
- 0: Does not use encryption. If encryption is not used, it is classified
as a malicious unauthorized AP.
- 1: Uses encryption. If encryption is used, it is classified as a
malicious unauthorized AP.
SSID type
- managed-ssid: SSID that is used in an authorized AP that is
connected to the APC.
- user-configured-ssid [SSID]: Entered SSID (An AP that has SSID as
SSID is classified as a friendly type unauthorized AP.)
SSID that is used when the SSID_TYPE is entered as user-
configured-ssid
CHAPTER 8. Security
Description
page 285 of 496