Reference Guide

840 | show ids dos-profile Dell PowerConnect ArubaOS 5.0 Command Line Interface | Reference Guide
The output of this command includes the following parameters:
Related Commands
Configure IDS DoS profiles using the command ids dos-profile.
Parameter Description
Spoofed Deauth Blacklist Shows if the profile has enabled or disabled detection of a deauth attack
initiated against a client associated to an Dell AP. When such an attack is
detected, the client is quarantined from the network to prevent a man-in-the-
middle attack from being successful.
Detect Ap Flood Attack Shows if the profile has enabled or disabled detection of flooding with fake AP
beacons to confuse legitimate users and to increase the amount of processing
needed on client operating systems.
AP Flood Threshold Number of fake AP beacons that must be received within the flood increase
time to trigger an alarm.
AP Flood Increase Time Time, in seconds, during which a configured number of fake AP beacons must
be received to trigger an alarm.
AP Flood Detection Quiet TIme Time, in seconds, that must elapse before an second fake AP flood alarm may
be triggered.
Detect EAP Rate Anomaly Shows if the profile has enabled or disabled Extensible Authentication Protocol
(EAP) handshake analysis to detect an abnormal number of authentication
procedures on a channel and generate an alarm when this condition is
detected.
EAP rate Threshold Number of EAP handshakes that must be received within the EAP rate time
interval to trigger an alarm.
EAP Rate TIme Interval Time, in seconds, during which the configured number of EAP handshakes must
be received to trigger an alarm.
EAP Rate Quiet Time Time, in seconds, that must elapse after an EAP rate anomaly alarm has been
triggered before another identical alarm may be triggered.
Detect Rate Anomalies Enables detection of rate anomalies.
Rate Thresholds for Assoc
Frames
Rate threshold for associate request frames.
Rate Thresholds for Disassoc
Frames
Rate threshold for disassociate frames.
Rate Thresholds for Deauth
Frames
Rate threshold for deauthenticate frames.
Rate Thresholds for Probe
Request Frames
Rate threshold for probe request frames.
Rate Thresholds for Probe
Response Frames
Rate threshold for probe response frames.
Rate Thresholds for Auth Frames Rate threshold for authenticate frames.
Detect 802.11n 40MHz
Intolerance Setting
Shows if the profile has enabled or disabled detection of 802.11n 40 MHz
intolerance setting, which controls whether stations and
APs advertising 40 MHz intolerance will be reported.
Client 40MHz Intolerance
Detection Quiet Time
Seconds of quiet time when the AP stops reporting intolerant
STAs if they have not been detected).