The dynamic-blacklist disable command disables the dynamic blacklist function.
The undo dynamic-blacklist disable command enables the dynamic blacklist function.
By default, the dynamic blacklist function is enabled.
Usage Scenario
Attack detection is enabled to detect flood attacks, weak IV attacks, spoofing attacks, and brute force key cracking attacks. When detecting attacks initiated by a device, an AP reports an alarm to the AC. In addition, you can run the undo dynamic-blacklist disable command to enable the dynamic blacklist function on the AC for handling flood attacks and brute force key cracking attacks. The AC then automatically adds the attacking device to a dynamic blacklist and discards packets sent from the attacking device till the dynamic blacklist ages out.
An AP can use the dynamic blacklist to filter out the blacklisted wireless devices to avoid malicious attacks.
Follow-up Procedure
Run the dynamic-blacklist aging-time command to set an aging time for the dynamic blacklist.