AirWave Wireless Management Suite | Configuration Guide Aruba Configuration Reference | 99
Perform these steps to configure or edit an IDS Denial of Service profile, and to create or edit profiles that
are referenced by a DOC profile.
1. Click
Profiles > IDS > Denial of Service in the Aruba Navigation pane.
2. Click the
Add button to create a new Signature Matching profile, or click the pencil icon next to an existing
profile to edit that profile. The
Details page appears. Complete the settings as described in Table 33:
Table 32 Predefined IDS DoS Profiles
Parameter ids-dosdisabled ids-dos-lowsetting ids-dosmedium-setting ids-dos-highsetting
Detect Disconnect Station
Attack
disabled enabled enabled enabled
Disconnect STA Detection
Quiet Time
900 seconds 900 seconds 900 seconds 900 seconds
Spoofed Deauth Blacklist disabled disabled disabled disabled
Detect AP Flood Attack disabled disabled disabled disabled
AP Flood Threshold 50 50 50 50
AP Flood Increase Time 3 seconds 3 seconds 3 seconds 3 seconds
AP Flood Detection Quiet
Time
900 seconds 900 seconds 900 seconds 900 seconds
Detect EAP Rate Anomaly disabled disabled enabled enabled
EAP Rate Threshold 60 60 30 60
EAP Rate Time Interval 3 seconds 3 seconds 3 seconds 3 seconds
EAP Rate Quiet Time 900 seconds 900 seconds 900 seconds 900 seconds
Detect Rate Anomalies disabled disabled disabled enabled
Detect 802.11n 40 MHz
Intolerance Setting
disabled enabled enabled enabled
Client 40 MHz Intolerance
Detection Quiet Time
900 seconds 900 seconds 900 seconds 900 seconds
Rate Thresholds for Assoc
Frames
default default default default
Rate Thresholds for
Disassoc Frames
default default default default
Rate Thresholds for
Deauth Frames
default default default default
Rate Thresholds for Probe
Request Frames
default probe-request-
response-thresholds
probe-request-response-
thresholds
probe-request-
response-thresholds
Rate Thresholds for Probe
Response Frames
default probe-
request-response-
thresholds
probe-request-
response-thresholds
probe-request-response-
thresholds
Rate Thresholds for Auth
Frames
default default default default