EasyManua.ls Logo

Siemens SCALANCE W1750D CLI - Page 163

Siemens SCALANCE W1750D CLI
762 pages
Print Icon
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Loading...
CLI Commands
4.9 I
SCALANCE W1750D CLI
Function Manual, 03/2019, C79000-G8976-C452-04
163
Parameter
Description
Range
Default
detect-bad-wep
Enables detection of WEP initialization vec-
tors that are known to be weak and/or re-
peating. A primary means of cracking WEP
keys is to capture 802.11 frames over an
extended period of time and search for im-
plementations that are still used by many
legacy devices.
— —
detect-beacon-
wrong- channel
Enables detection of beacons advertising
the incorrect channel.
— —
detect-block-ack-
attack
Enables detection of attempts to reset traffic
receive windows using the forged Block
ACK Add messages.
— —
detect-chan-based-
mitm
Enables or disables channel-based man-in-
the-middle attackdetection.
— —
detect-chopchop-
attack
Enables detection of ChopChop attack. — —
detect-client-flood
Enables detection of client flood attack.
—
—
detect-cts-rate-
anomaly
Enables detection of CTS rate anomaly. — —
detect-disconnect-
sta
Enables a station disconnection attack. In a
station disconnection, attacker spoofs the
MAC address of either an active client or an
active AP. The attacker then sends deau-
thenticate frames to the target device, caus-
ing it to lose its active association.
— —
detect-eap-rate-
anomaly
Enables EAP handshake analysisto detect
an abnormal number ofauthentication pro-
cedures on achannel and generate an
alarmwhen this condition is detected.
— —
detect-fatajack
Enables detection of fatjack attacks.
—
—
detect-hotspotter-
attack
Enables detection of hotspot attacks. — —
detect-ht-40mhz-
intolerance
Enables detection of 802.11n 40MHz intol-
erance setting, whichcontrols whether sta-
tions andAPs advertising 40 MHzintolerance
will be reported.
— —
detect-ht-
greenfield
Enables detection of HT devicesadvertising
greenfield preamblecapability.
— —
detect-invalid-
addresscombination
Enables detection of invalid address combi-
nations.
— —
detect-invalid-mac-
oui
Enables checking of the first threebytes of a
MAC address, known asthe OUI, assigned
by the IEEE toknown manufacturers. Often-
clients using a spoofed MACaddress do not
use a valid OUIand instead use a random-
lygenerated MAC address. EnablingMAC
OUI checking causes analarm to be trig-
gered if anunrecognized MAC address is
inuse.
— —
detect-malformed-
assoc-req
Enables detection of malformed association
requests.
— —
detect-malformed-
frame- auth
Enables detection of malformed authentica-
tion frames
— —

Table of Contents