CLI Reference Guide

284 | ids dos-profile Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Parameter Description Range Default
detect-invalid-address
Enable/disable detection of invalid address
combinations
true
false
false
detect-malformed-association-
request
Enable/disable detection of malformed
association requests.
true
false
disable
detect-malformed-auth-frame
Enable/disable detection of malformed
authentication frames
true
false
disable
detect-malformed-htie
Enable/disable detection of malformed HT IE true
false
false
detect-malformed-large-duration
Enable/disable detection of unusually large
durations in frames
true
false
true
detect-omerta-attack
Enable/disable detection of Omerta attack true
false
enable
detect-overflow-eapol-key
Enable/disable detection of overflow EAPOL
key requests
true
false
disable
detect-overflow-ie
Enable/disable detection of overflow
Information Elements (IE)
true
false
disable
detect-power-save-dos-attack
Enable/disable detection of Power Save DoS
attack
true
false
enable
detect-rate-anomalies
Enable/disable detection of rate anomalies true
false
disable
detect-rts-rate-anomaly
Enable/disable detection of RTS rate
anomaly
true
false
disable
detect-tkip-replay-attack
Enable/disable detection of TKIP replay
attack
true
false
disable
disassoc-rate-thresholds
Rate threshold for disassociate frames.
disconnect-deauth-disassoc-
threshold
Rate thresholds for Disassociate frames 1-50 8
disconnect-sta-assoc-resp-
threshold
The number of successful Association
Response or Reassociation response frames
seen in an interval of 10 seconds that should
trigger this event.
1-30 5
disconnect-sta-quiet-time
After a station disconnection attack is
detected, the time, in seconds, that must
elapse before another identical alarm can be
generated.
60-
360-
000seconds
900
seconds
eap-rate-quiet-time
After an EAP rate anomaly alarm has been
triggered, the time, in seconds, that must
elapse before another identical alarm may
be triggered.
60-360000 900
seconds
eap-rate-threshold
Number of EAP handshakes that must be 0-100000 60