The weak-iv-detect quiet-time command sets the quiet time for an AP to report the detected weak IV attacks to the AC.
The undo weak-iv-detect quiet-time command restores the default quiet time for an AP to report the detected weak IV attacks to the AC.
By default, the quiet time is 600 seconds for an AP to report the detected weak IV attacks to the AC.
Parameter |
Description |
Value |
|---|---|---|
quiet-time-value |
Specifies the quiet time for an AP to report the detected weak IV attacks to the AC. |
The value is an integer that ranges from 60 to 36000, in seconds. |
After attack detection is enabled on an AP, the AP reports alarms upon attack detection. If an attack source launches attacks repeatedly, a large number of repeated alarms are generated. To prevent this situation, configure the quiet time for an AP to report alarms. When detecting attack sources of the same MAC address, the AP does not report alarms in the quiet time. However, if the AP still detects attacks from the attack source after the quiet time expires, the AP reports alarms. You can set the quiet time based on attack types.
To obtain attack information in a timely manner, set the quiet time to a small value. If attack detection is enabled on many APs, and attacks are frequently detected, set the quiet time to a large value to prevent frequent alarm reports.
# Set the quiet time to 300 seconds for an AP to report the detected weak IV attacks to the AC.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap-group name office [HUAWEI-wlan-ap-group-office] radio 0 [HUAWEI-wlan-group-radio-office/0] wids attack detect weak-iv enable [HUAWEI-wlan-group-radio-office/0] quit [HUAWEI-wlan-ap-group-office] quit [HUAWEI-wlan-view] wids-profile name huawei [HUAWEI-wlan-wids-prof-huawei] weak-iv-detect quiet-time 300