Concept Guide

436| ids unauthorized-device-profile Dell Networking W-Series ArubaOS 6.5.x| Reference Guide
Parameter Description Range
Defaul
t
detect-invalid-mac-oui
Enables checking of the first three bytes
of a MAC address, known as the
organizationally unique identifier (OUI),
assigned by the IEEE to known
manufacturers. Often clients using a
spoofed MAC address do not use a valid
OUI and instead use a randomly
generated MAC address. Enabling MAC
OUI checking causes an alarm to be
triggered if an unrecognized MAC
address is in use.
— false
detect-misconfigured-ap
Enables detection of misconfigured APs.
An AP is classified as misconfigured if it is
classified as valid and does not meet any
of the following configurable parameters:
- valid channels
- encryption type
- list of valid AP MAC OUIs
- valid SSID list
— false
detect-sta-assoc-to-rogue
Enable/disable detection of station
association to rogue AP.
enable
detect-unencrypted-valid-
client
Enable/disable detection of unencrypted
valid clients.
— enable
detect-valid-client-
misassociation
Enable/disable detection of
misassociation between a valid client and
an unsafe AP. This setting can detect the
following misassociation types:
l MisassociationToRogueAP
l MisassociationToExternalAP
l MisassociationToHoneypotAP
l MisassociationToAdhocAP
l MisassociationToHostedAP
— enable
detect-valid-ssid-misuse
Enable/disable detection of Interfering or
Neighbor APs using valid/protected
SSIDs.
— disabl
e
detect-windows-bridge
Enables detection of Windows station
bridging.
— true
detect-wireless-bridge
Enables detection of wireless bridging. — false
detect-wireless-hosted-network
If enabled, this feature can detect the
presence of a wireless hosted network.
— enable