5-37
Cisco Wireless LAN Controller Configuration Guide
OL-9141-03
Chapter 5 Configuring Security Solutions
Configuring IDS
• The radio channel on which the attack was detected
• The day and time when the access point reported the attack
Using the CLI to Configure IDS Signatures
Follow these steps to configure IDS signatures using the controller CLI.
Step 1 If desired, create your own custom signature file.
Step 2 Make sure that you have a TFTP server available. See the guidelines for setting up a TFTP server in Step
2 of the “Using the GUI to Upload or Download IDS Signatures” section on page 5-31.
Step 3 Copy the custom signature file (*.sig) to the default directory on your TFTP server.
Step 4 To specify the download or upload mode, enter transfer {download | upload} mode tftp.
Step 5 To specify the type of file to be downloaded or uploaded, enter transfer {download | upload} datatype
signature.
Step 6 To specify the IP address of the TFTP server, enter transfer {download | upload} serverip
tftp-server-ip-address.
Note Some TFTP servers require only a forward slash (/) as the TFTP server IP address, and the TFTP
server automatically determines the path to the correct directory.
Step 7 To specify the download or upload path, enter transfer {download | upload} path
absolute-tftp-server-path-to-file.
Step 8 To specify the file to be downloaded or uploaded, enter transfer {download | upload} filename
filename.sig.
Note When uploading signatures, the controller uses the filename you specify as a base name and then
adds “_std.sig” and “_custom.sig” to it in order to upload both standard and custom signature
files to the TFTP server. For example, if you upload a signature file called “ids1,” the controller
automatically generates and uploads both ids1_std.sig and ids1_custom.sig to the TFTP server.
If desired, you can then modify ids1_custom.sig on the TFTP server (making sure to set
“Revision = custom”) and download it by itself.
Step 9 Enter transfer {download | upload} start and answer y to the prompt to confirm the current settings
and start the download or upload.
Step 10 To enable or disable individual signatures, enter this command:
config wps signature {standard | custom} state precedence# {enable | disable}
Step 11 To save your changes, enter this command:
save config
To Next Page
Loading...
Need help?
General
