Cisco 4400 Series User Manual

5-117
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 5 Configuring Security Solutions
Configuring IDS
Step 16 If desired, you can reset a specific signature or all signatures to default values. To do so, enter this
command:
config wps signature reset {signature_id | all}
Note You can reset signatures to default values only through the controller CLI.
Using the CLI to View IDS Signature Events
Use these commands to view signature events using the controller CLI.
1. To see whether IDS signature processing is enabled or disabled on the controller, enter this
command:
show wps summary
Information similar to the following appears:
Client Exclusion Policy
Excessive 802.11-association failures.......... Enabled
Excessive 802.11-authentication failures....... Enabled
Excessive 802.1x-authentication................ Enabled
IP-theft....................................... Enabled
Excessive Web authentication failure........... Enabled
Signature Policy
Signature Processing........................... Enabled
Note If IDS signature processing is disabled, all signatures are disabled, regardless of the state
configured for individual signatures.
2. To see individual summaries of all of the standard and custom signatures installed on the controller,
enter this command:
show wps signature summary
Information similar to the following appears:
Signature-ID..................................... 1
Precedence....................................... 1
Signature Name................................... Bcast deauth
Type............................................. standard
FrameType........................................ management
State............................................ enabled
Action........................................... report
Tracking......................................... per Signature and Mac
Signature Frequency.............................. 50 pkts/interval
Signature Mac Frequency.......................... 30 pkts/interval
Interval......................................... 1 sec
Quiet Time....................................... 300 sec
Description...................................... Broadcast Deauthentication Frame
Patterns:
0(Header):0x00c0:0x00ff
4(Header):0x01:0x01

Cisco 4400 Series Specifications

General

Brand	Cisco
Model	4400 Series
Category	Controller
Language	English