Release Notes

367 | ids dos-profile Dell Networking W-Series ArubaOS 6.4.x| Reference Guide
Parameter Description Range Default
client-ht-40mhz-intol-quiet-
time <seconds>
Controls the quiet time (when
to stop reporting intolerant
STAs if they have not been
detected), in seconds, for
detection of 802.11n 40 MHz
intolerance setting.
60-360000
seconds
900
seconds
client-flood-inc-time
Number of consecutive
seconds over which the client
count is more than the
threshold.
0-36000
seconds
3
seconds
client-flood-quiet-time
Time to wait, in seconds, after
detecting a client flood before
continuing the check.
60-360000
seconds
900
seconds
client-flood-threshold
Threshold for the number of
spurious clients in the system.
0-100000 150
clone
Copy data from another IDS
Denial Of Service Profile.
— —
cts-rate-quiet-time
Time to wait, in seconds, after
detecting a CTS rate anomaly
after which the check can be
resumed.
60-360000
seconds
900
seconds
cts-rate-threshold
Number of CTS control
packets over the time interval
that constitutes an anomaly.
0-100000 5000
cts-rate-time-interval
Time interval, in seconds, over
which the packet count should
be checked.
1-120 seconds 5
seconds
deauth-rate-thresholds
Rate threshold for
deauthenticate frames.
— —
detect-ap-flood
Enables detection of flooding
with fake AP beacons to
confuse legitimate users and
to increase the amount of
processing needed on client
operating systems.
true
false
false
detect-block-ack-dos
Enable/disable detection of
attempts to reset traffic
receive windows using forged
Block ACK Add messages.
true
false
true
detect-chopchop-attack
Enable/disable detection of
ChopChop attack.
true
false
false
detect-client-flood
Enable/disable detection of
client flood attack.
true
false
disable
detect-cts-rate-anomaly
Enable/disable detection of
CTS rate anomaly.
true
false
disable