Concept Guide

417| ids general-profile Dell Networking W-Series ArubaOS 6.5.x| Reference Guide
Parameter Description Range Default
sta-inactivity-timeout
Time, in seconds, after which a station is
aged out.
30-
360000
second
s
60
second
s
sta-max-unseen-timeout
Ageout time, in seconds, since station
was last seen. Minimum is 5.
5-
36000
second
s
5
second
s
unclass_ap_update
Enables or disables classification
updates for monitored APs. If this option
is enabled, there is a decrease in the
delay with which the devices are
classified.
- Disabled
unclass_device_update_interval
The time interval for the AP to send the
WMS a list of unclassified APs and
clients.
30-
36000
second
s
60
seconds
unclass_sta_update
Enables or disables classification
updates for monitored clients. If this
option is enabled, there is a decrease in
the delay with which the devices are
classified.
- Disabled
wired-containment
Enable containment from the wired side. true
false
false
wired-containment-ap-adj-mac
Enable/disable wired containment of
MACs offset by one from APs BSSID.
true
false
false
wired-containment-susp-l3-rogue
The basic wired containment feature
enabled using the wired-containment
command contains layer-3 APs whose
wired interface MAC addresses are
either the same as (or one character off
from) their BSSIDs. This feature can also
identify and contain an AP with a preset
wired MAC address that is completely
different from the AP’s BSSID if the MAC
address that the AP provides to wireless
clients as the ‘gateway MAC’ is offset by
one character from its wired MAC
address.
NOTE: This feature requires that the
following wired-containment parameter
in the ids general-profile is also enabled,
and that the confidence level of the
suspected rogue exceeds the level
configured by the suspect-rogue-
true false