301 | Intrusion Detection Dell Networking W-Series Instant 6.4.0.2-4.1 | User Guide
Containment Methods
You can enable wired and wireless containments to prevent unauthorized stations from connecting to your Instant
network.
Instant supports the following types of containment mechanisms:
l Wired containment— When enabled, W-IAPs generate ARP packets on the wired network to contain wireless
attacks.
l Wireless containment— When enabled, the system attempts to disconnect all clients that are connected or
attempting to connect to the identified Access Point.
n None— Disables all the containment mechanisms.
n Deauthenticate only— With deauthentication containment, the Access Point or client is contained by
disrupting the client association on the wireless interface.
n Tarpit containment— With Tarpit containment, the Access Point is contained by luring clients that are
attempting to associate with it to a tarpit. The tarpit can be on the same channel or a different channel as the
Access Point being contained.
Figure 113 Containment Methods
Configuring IDSUsing CLI
To configure IDS using CLI:
(Instant AP)(config)# ids
(Instant AP)(IDS)# infrastructure-detection-level <type>
(Instant AP)(IDS)# client-detection-level <type>
(Instant AP)(IDS)# infrastructure-protection-level <type>
(Instant AP)(IDS)# client-protection-level <type>
Comments to this Manuals