CLI Reference Guide

266 | firewall Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Parameter Description Range Default
mirror option. See "ip access-list session" on page
353.
l MAC flows to be mirrored with the MAC ACL
mirror option. See "ip access-list mac" on page
351.
If you configure both an IP address and a port to
receive mirrored packets, the IP address takes
precedence.
session-mirror-ipsec Configures session mirroring of all frames that are
processed by IPsec. Frames are sent to IP address
specified by the session-mirror-destination
option.This option is used only for troubleshooting or
debugging.
— disabled
session-tunnel-fib Enable session-tunnel based forwarding.
NOTE: Best practices is to enable this parameter
only during maintenance window or off-peak
production hours.
— disabled
session-voip-timeout Idle session timeout, in seconds, for sessions that
are marked as voice sessions. If no voice packet
exchange occurs over a voice session for the
specified time, the voice session is removed.
16-300 300
seconds
shape-mcast Enables multicast optimization and provides
excellent streaming quality regardless of the amount
of VLANs or IP IGMP groups that are used.
— disabled
voip-wmm-voip-content-enforcement If traffic to or from the user is inconsistent with the
associated QoS policy for voice, the traffic is
reclassified to best effort and data path counters
incremented.
This parameter requires the PEFNG license.
— disabled
Usage Guidelines
This command configures global firewall options on the controller.
Example
The following command disallows forwarding of non-IP frames between users:
firewall deny-inter-user-bridging
Related Commands
(host) (config) #show firewall
Command History
Release Modification
ArubaOS 3.0 Command introduced.
ArubaOS 3.2 The wmm-voip-content-enforcement parameter was introduced.