display wlan dynamic-blacklist

Function

The display wlan dynamic-blacklist command displays information about devices in the dynamic blacklist.

Format

display wlan dynamic-blacklist { all | ap-id ap-id | ap-name ap-name | mac-address mac-address }

Parameters

Parameter	Description	Value
all	Displays information about all devices in the dynamic blacklist.	-
ap-id ap-id	Displays information about attacking devices detected by the AP with a specified ID.	The AP ID must exist.
ap-name ap-name	Displays information about attacking devices detected by the AP with a specified name.	The AP name must exist.
mac-address mac-address	Displays information about attack devices with a specified MAC address.	The MAC address must exist.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Usage Scenario

An AP uses attack detection and dynamic blacklist functions to add a detected attack device to the dynamic blacklist, and rejects packets sent from this device until the device entry in the dynamic blacklist ages. You can run the display wlan dynamic-blacklist command to view information about devices in the dynamic blacklist.

Example

# Display information about all devices in the dynamic blacklist.

<HUAWEI> display wlan dynamic-blacklist all
#AP: Number of monitor APs that have detected the device
LAT: Left aging time(s)
act: Action frame            asr: Association request
aur: Authentication request  daf: Deauthentication frame
dar: Disassociation request  eapl: EAPOL logoff frame
pbr: Probe request           rar: Reassociation request
eaps: EAPOL start frame      sti: Static IP
brf: Broadcast flood
-------------------------------------------------------------------------------
MAC address       Last detected time    Reason   #AP   LAT
-------------------------------------------------------------------------------
0006-f476-cb70    2015-07-27/12:51:25   brf       1    100
0006-f476-ce90    2015-07-27/12:51:25   pbr       1    200
0006-f476-d35d    2015-07-27/12:51:25   pbr       1    200
0006-f476-d910    2015-07-27/12:51:25   sti       1    200
0006-f476-dd30    2015-07-27/12:51:25   pbr       1    200
0006-f476-df30    2015-07-27/12:51:25   pbr       1    200
-------------------------------------------------------------------------------
Total: 6, printed: 6

**Table 1** Description of the **display wlan dynamic-blacklist all** command output
Item	Description
MAC address	MAC address of the device in the dynamic blacklist.
Last detected time	Latest time when the device was added to the dynamic blacklist.
Reason	Reason why the device is added to the dynamic blacklist.
#AP	Number of APs that have detected and added the device to the dynamic blacklist.
LAT	Remaining aging time for the device in the dynamic blacklist.

# Display information about all devices added to the dynamic blacklist by the AP named wcw.

<HUAWEI> display wlan dynamic-blacklist ap-name wcw
LAT: Left aging time(s)
act: Action frame            asr: Association request
aur: Authentication request  daf: Deauthentication frame
dar: Disassociation request  eapl: EAPOL logoff frame
pbr: Probe request           rar: Reassociation request
eaps: EAPOL start frame      sti: Static IP
brf: Broadcast flood
-------------------------------------------------------------------------------
MAC address       Last detected time    Reason   LAT
-------------------------------------------------------------------------------
0006-f476-cb70    2015-07-27/12:51:25    sti     100
0006-f476-ce90    2015-07-27/12:51:25    brf     200
0006-f476-ced0    2015-07-27/12:51:30    pbr     200
0006-f476-d35d    2015-07-27/12:51:25    pbr     300
-------------------------------------------------------------------------------
Total: 4, printed: 4

# Display information about specified devices in the dynamic blacklist.

<HUAWEI> display wlan dynamic-blacklist mac-address 0006-f476-cb70
LAT: Left aging time(s)      BT: Block time(s)
act: Action frame            asr: Association request
aur: Authentication request  daf: Deauthentication frame
dar: Disassociation request  eapl: EAPOL logoff frame
pbr: Probe request           rar: Reassociation request
eaps: EAPOL start frame      sti: Static IP
brf: Broadcast flood
-------------------------------------------------------------
AP name  Last detected time   Reason   LAT     BT
-------------------------------------------------------------
wcw      2015-07-27/12:51:25   pbr     100     900
wcw2     2015-07-27/12:51:25   pbr     100    1900
-------------------------------------------------------------
Total: 2, printed: 2

**Table 2** Description of the **display wlan dynamic-blacklist mac-address** command output
Item	Description
AP name	Name of the monitoring AP.
Last detected time	Last time when the device is detected.
Reason	Reason why the device is added to the dynamic blacklist.
LAT	Remaining aging time for the device in the dynamic blacklist.
BT	Duration for which the device is in the dynamic blacklist.