User's Guide

• PING—use this to enable or disable ICMP echo request responses.
• SNMPA—use this to enable or disable reception SNMP agent requests.
• SNMPC—use this to configure SNMP agent community string.
• SNMPT—use this to enable or disable SNMP trap reception.
• HTTP—use this to enable or disable unencrypted Sensor connections.
• PANIC—use this to enable or disable reboot on a system error.
• UIPORT—use this to display the network port you are using for the GUI.
• SSlv3—use this to configure SSL version 3 support.
Configure IDS
Use the switches under IDS to enable AirDefense to work with some specific features. The following
configurations are available under IDS:
• SSLv3—Use this switch to enable/disable support for SSLv3, TLSv1.0 and TLSv1.1 protocols.
Recently these protocols were found vulnerable and we recommend that you do not use them.
However, if your deployment has access points and sensors that support these protocols, we
recommend that you enable this switch. Otherwise, you should evaluate the devices in your network
and consider disabling support for SSLv3, TLSv1.0 and TLSv1.1 protocols using this switch.
• FTMODE—Use this switch to enable/disable Fast Termination. When enabled, AirDefense internally
adjusts various operating parameters and configurations to support Fast Termination.
• SPOOF—Use this switch to enable/disable AirDefense's new MAC Spoof Detection algorithm.
This algorithm uses Forensic data and forensic queries to raise the new "MAC Spoof Detected"
alarm. If you are not interested in this new alarm, we recommend you disable this alarm using this
switch. By default, this switch is enabled.
IP Address Configuration
To configure the IP address of your AirDefense server:
1. Type ip, then press [Enter] at the prompt to change the IP address, subnet mask, and default
gateway of the AirDefense appliance you are logged onto. The IP configuration screen opens,
displaying the current network configuration.
2. Type a new IP address at the prompt. Press [Enter].
3. Type a new subnet mask. Press [Enter].
4. Type a new gateway address. Press [Enter]. Your new values display in bold text.
5. Type yes at the prompt to commit the changes. This returns you to the previous network screen.
AirDefense reboots on exit from ADSPadmin.
Important
If you are logging in remotely using SSH, check these values carefully for accuracy before
typing yes or no to commit the changes. Committing incorrect information will cause you
to lose connectivity to the ADSP appliance when it reboots.
ADSPAdmin Configure IDS
Extreme AirDefense User Guide for version 10.5. 877