Ruijie RG-WLAN Series - Page 89

Configuration Guide Configuring WIDS
2.4 Configuration
Configuration
Description and Command
Configuring Frame Filtering
(Optional) It is used to configure frame filtering.
kickout threshold
Configures the low-rate kickout threshold.
whitelist mac-address
Adds an entry to the whitelist.
whitelist max
Configures the length of the whitelist.
static-blacklist mac-address
Adds an entry to the static blacklist.
static-blacklist max
Configures the length of the static blacklist.
dynamic-blacklist enable
Enables the dynamic blacklist function.
dynamic-blacklist lifetime
Configures the lifetime of the dynamic blacklist.
dynamic-blacklist ap-max
Configures the length of the dynamic blacklist on APs.
ssid-filter max
Configures the SSID-based blacklist and whitelist and
their length.
ssid-filter blacklist mac-address
Adds an entry to the SSID-based blacklist.
ssid-filter blacklist max
Configures the length of the SSID-based blacklist, 32
by default.
ssid-filter whitelist mac-address
Adds an entry to the SSID-based whitelist.
ssid-filter whitelist max
Configures the length of the SSID-based whitelist, 32
by default.
Configuring IDS
(Mandatory) It is used to configure IDS.
attack-detection enable
Specifies the IDS type.
attack-detection ddos
Configures the interval and packet threshold of DDoS
attack detection.
attack-detection flood multi-mac
Configures the interval and packet threshold of
multi-STA flooding attack detection.
attack-detection flood single-mac
Configures the interval and packet threshold of
single-user flood attack detection.
attack-detection spoof
Configures the interval and packet threshold of the
spoofing attack detection.
attack-detection weak-iv
Configures the interval and packet threshold of the
weak IV attack detection.
attack-detection statistics
ap-max
Configures the length of IDS statistics on APs.
Configuring User Isolation
(Optional) It is used to configure user isolation.
user-isolation enable
Enables the AP-based and AP-SSID-based layer-2
user isolation.