Ruijie RG-WLAN Series - Page 92

Configuration Guide Configuring WIDS
 Run the static-blacklist mac-address command to add an entry to the static blacklist in WIDS configuration mode.
The static blacklist filtering function effectively works only after an effective static blacklist entry is configured.
 Run the static-blacklist max command to configure the maximum number of entries in the static list in WIDS
configuration mode, indicating the maximum number of permissible static blacklist entries on the device.
Command
static-blacklist { mac-address H.H.H |max num }
Parameter
Description
mac-address H.H.H: Indicates the MAC address of a static blacklist entry.
max num: Indicates the length of the static blacklist ranging from 1 to 2,048.
Defaults
By default, the static blacklist is empty and the static blacklist length is 1,024.
Command
Mode
WIDS configuration mode
Usage Guide
The static blacklist function takes effect only when the static blacklist has entries.
 Configuring the Dynamic Blacklist
 Optional.
 Run the dynamic-blacklist enable command to enable the dynamic blacklist function in WIDS configuration mode. A
dynamic blacklist entry is generated dynamically along with the IDS attack detection and works only after the dynamic
blacklist function is enabled.
 Run the dynamic-blacklist lifetime command to configure the service life of the dynamic blacklist in WIDS
configuration mode, indicating how long the dynamic blacklist exists in the device.
 Run the dynamic-blacklist ap-max command to configure the maximum number of dynamic blacklist entries on APs in
WIDS configuration mode.
 Run the dynamic-blacklist mac-address command to add an entry to the dynamic blacklist in WIDS configuration
mode.
Command
dynamic-blacklist { enable | lifetime time |ap-max num }
Parameter
Description
enable: Enables the dynamic blacklist function
lifetime time: Indicates the service life of the dynamic blacklist ranging from 60 to 86,400 seconds.
ap-max num: Indicates the length of the dynamic blacklist on APs.
Defaults
By default, the dynamic blacklist function is disabled. The default length of the dynamic blacklist is 2,048 on
ACs and APs with 300-second lifetime.
Command
Mode
WIDS configuration mode
Usage Guide
A dynamic blacklist entry is generated in the IDS attack detection function.
 Configuring the SSID-Based Blacklist
 Optional.
 Run the ssid-blacklist mac-address command to add an entry to the SSID-based static blacklist in WIDS
configuration mode. The static blacklist filtering function effectively works only after an effective static blacklist entry is
configured.