Users Guide

Dell PowerConnect W-AirWave 7.4 | Configuration Guide Configuration Reference | 87
client from the Dell PowerConnect W system. When a client is blacklisted in the Dell PowerConnect W system,
the client is not allowed to associate with any AP in the network for a specified amount of time. If a client is
connected to the network when it is blacklisted, a de-authentication message is sent to force the client to
disconnect. While blacklisted, the client cannot associate with another SSID in the network.
Table 36 summarizes the predefined IDS Denial of Service profiles. These profiles are viewable with the Profiles
> IDS > Denial of Service path in the navigation pane.
Perform these steps to configure or edit an IDS Denial of Service profile, and to create or edit profiles that are
referenced by a DOC profile.
1. Select Profiles > IDS > Denial of Service in the navigation pane.
Table 36 Predefined IDS DoS Profiles
Parameter ids-dosdisabled ids-dos-lowsetting ids-dosmedium-setting ids-dos-highsetting
Detect Disconnect Station
Attack
disabled enabled enabled enabled
Disconnect STA Detection
Quiet Time
900 seconds 900 seconds 900 seconds 900 seconds
Spoofed Deauth Blacklist disabled disabled disabled disabled
Detect AP Flood Attack disabled disabled disabled disabled
AP Flood Threshold 50 50 50 50
AP Flood Increase Time 3 seconds 3 seconds 3 seconds 3 seconds
AP Flood Detection Quiet Time 900 seconds 900 seconds 900 seconds 900 seconds
Detect EAP Rate Anomaly disabled disabled enabled enabled
EAP Rate Threshold 60 60 30 60
EAP Rate Time Interval 3 seconds 3 seconds 3 seconds 3 seconds
EAP Rate Quiet Time 900 seconds 900 seconds 900 seconds 900 seconds
Detect Rate Anomalies disabled disabled disabled enabled
Detect 802.11n 40 MHz
Intolerance Setting
disabled enabled enabled enabled
Client 40 MHz Intolerance
Detection Quiet Time
900 seconds 900 seconds 900 seconds 900 seconds
Rate Thresholds for Assoc
Frames
default default default default
Rate Thresholds for Disassoc
Frames
default default default default
Rate Thresholds for Deauth
Frames
default default default default
Rate Thresholds for Probe
Request Frames
default probe-request-response-
thresholds
probe-request-response-
thresholds
probe-request-response-
thresholds
Rate Thresholds for Probe
Response Frames
default probe-request-
response-thresholds
probe-request-response-
thresholds
probe-request-response-
thresholds
Rate Thresholds for Auth
Frames
default default default default