Release Notes

power-save-dos-quiet-time
power-save-dos-threshold
probe-request-rate-thresholds <number>
probe-response-rate-thresholds <number>
rts-rate-quiet-time
rts-rate-threshold
rts-rate-time-interval
spoofed-deauth-blacklist
tkip-replay-quiet-time
Description
This command configures traffic anomalies for denial of service (DoS) attacks.
Syntax
Parameter Description Range Default
<profile>
Name that identifies an
instance of the profile. The
name must be 1-63
characters.
— “default”
ap-flood-inc-time
Time, in seconds, during which
a configured number of fake
AP beacons must be received
to trigger an alarm.
0-36000 3600
seconds
ap-flood-quiet-time
After an alarm has been
triggered by a fake AP flood,
the time, in seconds, that must
elapse before an identical
alarm may be triggered.
60-360000 900
seconds
ap-flood-threshold
Number of fake AP beacons
that must be received within
the flood increase time to
trigger an alarm.
0-100,000 50
assoc-rate-thresholds
Rate threshold for associate
request frames.
— —
auth-rate-thresholds
Rate threshold for
authenticate frames.
— —
block-ack-dos-quiet-time
Time to wait, in seconds, after
detecting an attempt to reset
the receive window using a
forged block ACK add.
60-360000
seconds
900
seconds
chopchop-quiet-time
Time to wait, in seconds, after
detecting a ChopChop attack
after which the check can be
resumed.
60-360000
seconds
900
seconds
Dell Networking W-Series ArubaOS 6.4.x | Reference Guide ids dos-profile | 366