R2511-HP MSR Router Series WLAN Configuration Guide(V5)

57
• In normal mode, an AP provides WLAN data services but does not perform any scanning.
• In monitor mode, an AP scans all Dot11 frames in the WLAN, but cannot provide WLAN services.
An AP operating in this mode cannot provide WLAN service, and you do not need to configure a
service template.
• In hybrid mode, an AP can both scan devices in the WLAN and provide WLAN services. For an AP
operating in this mode, you need to configure a service template so that the AP can provide WLAN
service when scanning devices.
To configure the AP operating mode:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure the AP operating
mode.
• Configure the AP operating
mode as monitor:
wlan work-mode monitor
• Configure the AP operating
mode as hybrid:
wlan device-detection enable
Use either command.
By default, the AP operating mode
is normal.
• When an AP has its operating
mode changed from normal to
monitor, it does not restart.
• When an AP has its operating
mode changed from monitor to
normal, it restarts.
Configuring attack detection
Configuring attack detection
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter IDS view.
wlan ids
N/A
3. Enable IDS attack
detection.
attack-detection enable { all | flood |
spoof | weak-iv }
By default, IDS attack detection is
disabled.
Displaying and maintaining attack detection
Task Command Remarks
Display all the attacks detected by
WLAN IDS IPS.
display wlan ids history [ | { begin
| exclude | include }
regular-expression ]
Available in any view.
Display the count of attacks
detected by WLAN IDS IPS.
display wlan ids statistics [ |
{ begin | exclude | include }
regular-expression ]
Available in any view.
Clear the history of attacks
detected by the WLAN system.
reset wlan ids history Available in user view.
Clear the statistics of attacks
detected in the WLAN system.
reset wlan ids statistics Available in user view.