神州数码AP的威胁检测功能设置

trapflags rouge-ap

开启发现非法AP trap,如果检测到非法AP,AC将立刻发送Trap

wired-detection-vlan

设置unmanaged AP接入有线网络检测包所带的vlan id

①wids-security admin-config-rogue

添加非法AP

SW3(config)#wireless

SW3(config-wireless)# ap database 00-03-0f-3c-94-20

SW3(config-wrieless-ap)#mode rogue/standalone/ws-managed

②wids-security ap-chan-illegal

打开非法信道检测

③wids-security fakeman-ap-mangaged-ssid

开启Vendor

④wids-security fakeman-ap-no-ssid

检测Beacon帧中是否带有SSID

⑤wids-securtiy managed-ap-ssid-invalid

打开managed ap发送无效SSID的检测,若没有。AC将会把那台AP设置为rogue AP

⑥wids-security managed-ssid-secu-bad

AP的beacon帧中会带有其安全认证方式,AC中也记录了AP的配置。通过对比二者中安全认证方式是否一致,从而检测rogue AP

⑦wids-security rogue-det-trap-interval

设置检查rogue AP的时间间隔

⑧wids-security standalone-cfg-invalid

检查胖AP的配置和AC上保存的配置是否一致,从来断定rogue AP

⑨wids-security unknown-ap-manage-ssid

打开非法AP假冒SSID的检测

⑩wids-security unmanaged-ap-wired

打开unmanaged接入有线网的检测

11wids-security wds-device-unexpected

WDS (wireless distribution system无线分布式系统)让接入点的AP通过中级或者桥接方式降低了对有线网的依赖性,从而提高了整个网络的灵活度和便捷性

wids-security wired-detection-interval

打开对有线网是否连通的检测

This entry was posted in IT运维, 计算机网络 and tagged , , . Bookmark the permalink.