Installation guide

D-102 Motorola RF Switch System Reference Guide
7. Select Save (from the lower left-hand corner) to apply the changes.
D.7.6.5 Mobile Unit Intrusion Detection
Mobile unit (MU) intrusion detection can enabled on the RF Switch to provide proactive protection against
active intrusion attempts. The switch can detect numerous intrusion violations and can alert administrators
of intrusion attempts and attacks. The switch can mitigate by automatically blacklisting MUs triggering the
violation.
The following configurations will be performed as part of this MU intrusion detection example:
• The global detection window will be increased from 10 seconds to 60 seconds.
• An excessive authentication failure intrusion violation will be configured with a threshold of 10 attempts.
If 10 authentication failures occur within a 60 second window, an alarm is generated and mitigation
performed.
• The Time to Filter for the excessive authentication failure intrusion violation will be set to 300 seconds.
If an MU triggers the intrusion violation, the MUs MAC address is filtered for 5 minutes.
Switch Web UI Configuration
The following configuration example demonstrates how to enable mobile unit intrusion detection for
excessive authentication failures:
1. From the switch menu tree select Security > Mobile Unit Intrusion Detection.
2. Select the Configuration tab.