Reference Guide

282 | ids dos-profile Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
power-save-dos-min-frames
power-save-dos-quiet-time
power-save-dos-threshold
probe-request-rate-thresholds <number>
probe-response-rate-thresholds <number>
rts-rate-quiet-time
rts-rate-threshold
rts-rate-time-interval
spoofed-deauth-blacklist
tkip-replay-quiet-time
Description
This command configures traffic anomalies for denial of service (DoS) attacks.
Syntax
Parameter Description Range Default
<profile>
Name that identifies an instance of the
profile. The name must be 1-63 characters.
— “default”
ap-flood-inc-time
Time, in seconds, during which a configured
number of fake AP beacons must be
received to trigger an alarm.
0-36000 3600
seconds
ap-flood-quiet-time
After an alarm has been triggered by a fake
AP flood, the time, in seconds, that must
elapse before an identical alarm may be
triggered.
60-360000 900
seconds
ap-flood-threshold
Number of fake AP beacons that must be
received within the flood increase time to
trigger an alarm.
0-100,000 50
assoc-rate-thresholds
Rate threshold for associate request frames. — —
auth-rate-thresholds
Rate threshold for authenticate frames. — —
block-ack-dos-quiet-time
Time to wait, in seconds, after detecting an
attempt to reset the receive window using a
forged block ACK add.
60-360000
seconds
900
seconds
chopchop-quiet-time
Time to wait, in seconds, after detecting a
ChopChop attack after which the check can
be resumed.
60-360000
seconds
900
seconds
client-ht-40mhz-intol-quiet-
time <seconds>
Controls the quiet time (when to stop
reporting intolerant STAs if they have not
been detected), in seconds, for detection of
802.11n 40 MHz intolerance setting.
60-360000
seconds
900
seconds
client-flood-inc-time
Number of consecutive seconds over which
the client count is more than the threshold.
0-36000
seconds
3 seconds
client-flood-quiet-time
Time to wait, in seconds, after detecting a
client flood before continuing the check.
60-360000
seconds
900
seconds
client-flood-threshold
Threshold for the number of spurious clients 0-100000 150