Nortel Networks 2300 manual Flood Attacks

Rogue Detection and Countermeasures 551

Flood Attacks

A flood attack is a type of Denial of Service attack. During a flood attack, a rogue wireless device attempts to overwhelm the resources of other wireless devices by continuously injecting management frames into the air. For example, a rogue client can repeatedly send association requests to try to overwhelm APs that receive the requests.

The threshold for triggering a flood message is 100 frames of the same type from the same MAC address, within a one-second period. If WSS Software detects more than 100 of the same type of wireless frame within one second, WSS Software generates a log message. The message indicates the frame type, the MAC address of the sender, the listener (AP and radio), channel number, and RSSI.

Nortel WLAN Security Switch 2300 Series Configuration Guide