H3C Technologies H3C Intelligent Management Center - Manual (Page 455)

433
3. Configure the function set as needed:
{
Enable ADOS—ADOS prevents WIPS from being attacked. When this function is enabled,
WIPS detects attacks to itself and takes countermeasures such as packet rate limit and
filtering.
{
Enable WIPS for a hybrid sensor that provides access services—This function improves WIPS
detection and attack prevention performance, but decreases access performance of the
sensor.
{
Function set supported by the attack detection policy—Options are Ad Hoc Network,
Spoofing AP, Spoofing Client, AP Flood Attack, EAPOL-Start DoS Attack, Authentication DoS
Attack, Association DoS Attack, Reassociation DoS Attack, Weak IV, and Invalid OUI.
{
Function set supported by the countermeasures policy—Options are Misconfigured AP,
Rogue AP, Unauthorized Client, External AP, Misassociated Client, Potential-rogue AP,
Potential-external AP, Uncategorized AP, Uncategorized Client, and Potential-authorized AP.
4. Click OK.
NOTE:
After you configure the function set supported by the attack detection policy, you can only select the
configured function set when you configure the attack detection policy. The rule also takes effect on the
function set supported by the countermeasures policy.
Configuring sensors
You can do the following to configure a sensor:
• Configuring a fit AP as a sensor
• Configuring the operating mode of a radio
• Binding a sensor to a virtual security domain
Viewing the sensor list
1. Click the Service tab.
2. Select WLAN Manager > WIPS Management > Sensor Management from the navigation tree.
The sensor list displays all sensors.
{
Status—Online status of the sensor: Online and Offline.
{
AP Label—Label of the sensor. Click the label of the sensor to view its details.
{
Radio 1—Management status and detection mode of the radio. The down icon indicates
that the radio is in down management status, and the up icon
indicates that the radio is
in up management status.
The following detection modes are available:
− Access First—Gives priority to access services. The access duration is longer than the
WIPS duration.
− Detection First—Gives priority to WIPS. The WIPS duration is longer than the access
duration.
− Hybrid Mode—Balanced between the access first and detection first operating mode.