Concept Guide

1491| show firewall Dell Networking W-Series ArubaOS 6.5.x| Reference Guide
Parameter Description
Prevent DHCPExhaustion
If enabled, this option checks for DHCP client
hardware address against the packet source
MAC address. This command checks the frame's
source-MAC against the DHCPv4 client hardware
address and drops the packet if it does not
match. This feature prevents a client from
submitting multiple DHCP requests with different
hardware addresses, thereby preventing DHCP
pool depletion.
Stateful SIPS Processing
If disabled, disables monitoring of exchanges
between a voice over IP or voice over WLAN
device and a SIP server. This option should be
enabled only when there is no VoIP or VoWLAN
traffic on the network.
Deny Source Routing
If enabled, forwarding of IP frames with source
routing with the source routing options set is
disallowed.
Immediate Freeback
If enabled, immediately frees buffers on
controllers. Do not enable this option unless
instructed to do so by a technical support
representative.
DPI Classification
If enabled, performs deep packet inspection.
STUN Based Traversal
If enabled, allows STUN- based firewall traversal.
Web Content Classification
If enabled, allows web content classification for
all HTTP traffic.
Default: disabled
Web Content Cache Miss Drop
If enabled, allows the controller to drop any
packets that do not match any web content
category or reputation levels in the controller's
internal web content cache.
Default: disabled
Stateful ICMP Processing
Process stateful inspection of ICMP packets.
Default: disabled
Optimize Duplicate Address Detection frames
Reduce flooding of IPv4 Gratuitous ARPs/IPv6
Duplicate Address Detection (DAD) frames onto
wireless clients.
Default: enabled