Concept Guide

Parameter Description Range Default
detect-disconnect-sta
Enables a station disconnection attack.
In a station disconnection, attacker
spoofs the MAC address of either an
active client or an active AP. The
attacker then sends deauthenticate
frames to the target device, causing it to
lose its active association.
— —
detect-eap-rate-anomaly
Enables Extensible Authentication
Protocol (EAP) handshake analysis to
detect an abnormal number of
authentication procedures on a channel
and generate an alarm when this
condition is detected.
— —
detect-fatajack
Enables detection of fatjack attacks. — —
detect-hotspotter-attack
Enables detection of hotspot attacks. — —
detect-ht-40mhz-
intolerance
Enables detection of 802.11n 40 MHz
intolerance setting, which controls
whether stations and APs advertising 40
MHz intolerance will be reported.
— —
detect-ht-greenfield
Enables detection of high throughput
devices advertising greenfield preamble
capability.
— —
detect-invalid-
addresscombination
Enables detection of invalid address
combinations.
— —
detect-invalid-mac-oui
Enables checking of the first three bytes
of a MAC address, known as the
organizationally unique identifier (OUI),
assigned by the IEEE to known
manufacturers. Often clients using a
spoofed MAC address do not use a valid
OUI and instead use a randomly
generated MAC address. Enabling MAC
OUI checking causes an alarm to be
triggered if an unrecognized MAC
address is in use.
— —
detect-malformed-assoc-req
Enables detection of malformed
association requests.
— —
detect-malformed-frame-
auth
Enables detection of malformed
authentication frames
— —
Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | CLI Reference Guide ids | 147