Ruijie RG-WLAN Series - Page 93

Configuration Guide Configuring WIDS
 Run the ssid-filter blacklist max command to configure the maximum number of entries in the SSID-based static
blacklist in WIDS configuration mode.
Command
ssid-filter { max num | blacklist mac-address H.H.H in-ssid string | blacklist max num }
Parameter
Description
max num: Indicates the maximum length of the SSID-based blacklist, ranging from 1 to 128. The default is
64.
blacklist mac-address H.H.H in-ssid string: Adds an entry to the specified SSID-based blacklist.
blacklist max num: Configures the length of the SSID-based blacklist, ranging from 1 to 64. The default is
32.
Defaults
The SSID-based blacklist is empty.
Command
Mode
WIDS configuration mode
Usage Guide
This function takes effect only when the SSID-based blacklist has entries.
 Configuring the SSID-Based Whitelist
 Optional.
 Run the ssid-filter whitelist mac-address command to add an entry to the SSID-based whitelist in WIDS configuration
mode. The whitelist filtering function effectively works only after an effective whitelist entry is configured.
 Run the ssid-filter whitelist max command to configure the maximum number of entries in the SSID-based whitelist in
WIDS configuration mode.
Command
ssid-filter { whitelist mac-address H.H.H in-ssid string | whitelist max num }
Parameter
Description
whitelist mac-address H.H.H in-ssid string: Configures the whitelist entry for a specified SSID.
whitelist max num: Configures the length of the SSID-based whitelist, rangingfrom 1 to 64. The default is
32.
Defaults
The SSID-based whitelist is empty.
Command
Mode
WIDS configuration mode
Usage Guide
This function takes effect only when the SSID-based whitelist has entries.
Verification
Conduct related function verifications based on corresponding frame filtering rules.
 Check the low-rate STA filtering function. The packets are discarded and the low-rate STAs are successfully removed.
 Check the whitelist function. When the whitelist is configured, the STAs not included in the whitelist cannot join the AP.
 Check the static blacklist function. When the static blacklist is configured, the STAs included in the static blacklist
cannot join the AP.
 Check the dynamic blacklist function. When the dynamic blacklist function is enabled, entries in the dynamic blacklist
can be generated along with the IDS attack detection, and STAs in the dynamic blacklist cannot join the AP again.
 Check the SSID-based blacklist function. When the SSID-based blacklist is configured, STAs in the SSID-based
blacklist cannot join this SSID service.