Concept Guide

431| ids signature-profile Dell Networking W-Series ArubaOS 6.5.x| Reference Guide
Parameter Description Default
probe-request
Frame type is probe request
probe-response
Frame type is probe response
ssid
For beacon, probe-request, and probe-response frame
types, specify the SSID as either a string or hex pattern.
—
ssid-length
For beacon, probe-request, and probe-response frame
types, specify the length, in bytes, of the SSID. Maximum
length is 32 bytes.
—
no
Negates any configured parameter. —
payload <pattern>
Pattern at a fixed offset in the payload of an 802.11 frame.
Specify the pattern to be matched as a string or hex pattern.
Maximum length is 32 bytes.
—
offset
When a payload pattern is configured, specify the offset in
the payload where the pattern is expected to be found in the
frame.
—
seq-num
Sequence number of the frame. —
src-mac
Source MAC address in the 802.11 frame header. —
valid-ap
Matches a valid AP SSID —
Example
The following command configures a signature profile:
(host) (config) #ids signature-profile floor4
(host) (IDS Signature Profile "floor4") #frame-type assoc
(host) (IDS Signature Profile "floor4") #src-mac 00:00:00:00:00:00
Usage Guidelines
The following describes the configuration for the predefined signature profiles:
Signature Profile Parameter Value
AirJack frame-type beacon ssid = AirJack
ASLEAP frame-type beacon ssid = asleap
Deauth-Broadcast frame-type deauth
dst-mac ff:ff:ff:ff:ff:ff