H3C MSR Series Configuration Manual

Also see for MSR Series: Troubleshooting guide Command reference Configuration guide Manual Configuration guide

Contents

H3C MSR Series Configuration Manual Manual pdf 65 page image

58Configuring AP operating modeA WLAN consists of various APs that span across the building offering WLAN services to the clients.The administrator may want some of these APs to detect rogue devices. The administrator canconfigure an AP to operate in any of the three modes, normal, monitor, or hybrid.• In normal mode, an AP provides WLAN data services but does not perform any scanning.• In monitor mode, an AP scans all Dot11 frames in the WLAN, but cannot provide WLANservices. An AP operating in this mode cannot provide WLAN service, and you do not need toconfigure a service template.• In hybrid mode, an AP can both scan devices in the WLAN and provide WLAN services. For anAP operating in this mode, you need to configure a service template so that the AP can provideWLAN service when scanning devices.To configure the AP operating mode:Step Command Remarks1. Enter system view. system-view N/A2. Configure the AP operatingmode.• Configure the AP operatingmode as monitor:wlan work-mode monitor• Configure the AP operatingmode as hybrid:wlan device-detectionenableUse either command.By default, the AP operatingmode is normal.• When an AP has itsoperating mode changedfrom normal to monitor, itdoes not restart.• When an AP has itsoperating mode changedfrom monitor to normal, itrestarts.Configuring attack detectionConfiguring attack detectionStep Command Remarks1. Enter system view. system-view N/A2. Enter IDS view. wlan ids N/A3. Enable IDS attackdetection.attack-detection enable { all | flood |spoof | weak-iv }By default, IDS attack detectionis disabled.Displaying and maintaining attack detectionTask Command RemarksDisplay all the attacks detectedby WLAN IDS IPS.display wlan ids history [ |{ begin | exclude | include }regular-expression ]Available in any view.Display the count of attacksdetected by WLAN IDS IPS.display wlan ids statistics [ |{ begin | exclude | include }regular-expression ]Available in any view.