WLC 4400 and IDS attacks

[jalcalagarcia]

Hi,

I have a WLC 4400 and a WCS 5.2. I'm receiving alarm about flood atacks and desauthentication attacks from a client. These alarms are detected by the IDS system. I'd like to know if there are any way to block this client.

Thanks a lot.

[sschmidt]

WCS manually disabled client template:

http://www.cisco.com/en/US/docs/wireless/wcs/5.2/configuration/guide/5_2temp.html#wpmkr1138044

[jalcalagarcia]

Thanks Sschmidt,

I saw this solution. The problem it's that i must create an entry by any client. If there are any client that capture the wpa key and after chage his mac i couldn't block them. Is that correct? I don't know how easily it's capture authenticantion packets with a WLC.

Thanks