H3C Technologies H3C Intelligent Management Center - Manual (Page 474)

452
5. Enter a partial or complete name of the signature rule in the query field on the upper right
corner.
6. Click the Query icon . The signature rule list displays all signature rules matching the query
criteria.
7. Clear the Query field, and click the Query icon to display all signature rules.
To perform an advanced query:
1. Click the Service tab.
2. Select WLAN Manager > WIPS Management > Virtual Security Domain from the navigation tree.
3. Click the Signature Policy tab.
4. Click Signature Rule.
The signature rule list displays all signature rules.
5. Click the Advanced icon to the right of the query field. This operation also clears the query
field.
6. Set the query criteria:
{
Rule Name—Enter a partial or complete signature rule name.
{
AC—Select the AC where the signature rule is configured. If you select All, this field does not
serve as a query criterion.
7. Click Query.
The signature rule list displays all signature rules matching the query criteria.
8. Click Reset to clear the query criteria and display all signature rules.
Adding a signature rule
1. Click the Service tab.
2. Select WLAN Manager > WIPS Management > Virtual Security Domain from the navigation tree.
3. Click the Signature Policy tab.
4. Click Signature Rule.
The signature rule list displays all signature rules.
5. Click Add.
6. Configure signature rule information:
{
AC—Select an AC. IMC creates signature rules on the AC.
{
Rule ID—Select a signature rule ID. A rule ID uniquely identify a signature rule. If IMC does
not synchronize with the device in time, the system might prompt error when you add a
signature rule. For example, if you have created a signature rule with the ID 50, but IMC
does not synchronize with the device in time, adding a signature rule with the ID 50 in IMC
will fail.
{
Rule Name—Enter the name of the signature rule, a string of 1 to 32 characters. It can
contain letters, digits, and underlines. The rule name must be unique.
{
Alarm Event Level—Select an alarm event level. A higher level represents a more serious
event. When the match count of the signature rule reaches the upper limit, the sensor
generates an alarm event and reports to the AC.
{
Tracking Mode—Select a tracking mode for the signature rule. Options are MAC, Signature,
and MAC and Signature.